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ABSTRACT 


This  Thesis  reviews  the  increasing  need  for  security  in 
a  personal  computer  (PC)  environment  and  proposes  a  new 
approach  for  securing  PC  applications  at  the  application 
layer.  The  Relay  Race  Approach  extends  two  standard 
approaches:  data  encryption  and  password  access  control  at 
the  main  program  levels  to  the  subprogram  level  by  the  use 
of  a  special  parameter,  the  "Baton".  The  applicability  of 
this  approach  is  demonstrated  in  an  original  Basic 
application  and  an  existing  Dbase  IV  application, 
representing  both  third  generation  language  (36L)  and  fourth 
generation  language  (4GL)  environments.  The  Approach  can 
add  to  overall  network  security  in  the  PC  LAN  environment  as 
well.  The  Approach  is  successful  and  proposed  enhancements 
can  strengthen  the  Approach. 
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I.  INTRODUCTION 


The  proliferation  of  information  systems  in  virtually 
all  areas  of  business  and  government  has  increased  the 
importance  of  computer  security  issues.  As  more  people 
become  computer  literate,  the  risks  of  ill-intentioned 
individuals  obtaining  unauthorized  access  or  violating  the 
integrity  and  validity  of  data  grow.  Potential  solutions  to 
computer  security  risks  are  varied  and  numerous  because 
different  types  of  computer  hardware,  operating  systems,  and 
application  software  have  different  security  strengths  and 
weaknesses . 

Different  environments  and  applications  require  varying 
levels  of  security  and  security  measures.  Some  environments 
need  to  target  their  security  measures  toward  threats  of 
accidental  data  corruption  while  others  are  primarily 
concerned  with  unauthorized  access  to  sensitive  information. 
Another  computer  security  issue  is  system  protection  from 
viruses,  worms,  trojan  horses,  etc. 

Widespread  use  of  personal  computers  and  groxvth  of  end 
user  computing  have  introduced  myriad  security  concerns . 
Almost  every  personal  computer  user  is  likely  to  view  virus 
protection,  data  backup,  floppy  disk  control,  and  data 
encription  as  primary  computer  security  issues  (Murray  1989, 
Stephenson  1989,  Brown  1989) .  However,  many  personal 
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computer  security  concerns  for  the  most  part  remain  largely 
vtnaddressed  at  this  time  (Pfleeger,  1989)  .  Moreover,  the 
growing  population  of  knowledgeable  personal  computer  users 
incre.Mses  the  numerical  chances  of  security  breaches 
involving  personal  computers . 

This  research  explores  the  unique  security  issues 
involving  personal  computers  and  proposes  a  new  approach  for 
securing  personal  computer  applications  and  data. 
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II.  SECURITY  IN  PERSONAL  COMPUTERS 


The  use  of  personal  corputers,  including  microcomputers, 
office  automation  workstations  and  intelligent  workstations, 
has  spread  svibstantially  in  recent  years.  Since  the 

production  of  these  systems,  in  the  late  1970s,  they  have 
undergo;:ie  far  reaching  changes  and  improvements  which  have 
brought  them  almost  to  the  level  of  performance  of  large 
computers  (Giladi  and  Zviran,  1989) .  Analysis  of  the 
development  and  characteristics  of  personal  computers  and 
large  systems  shows  that  the  processing  speed  of  present 
personal  computers  is  equal  or  even  superior  to  that  of  the 
main  large  systems  that  were  in  use  during  the  late  1970s 
(e.g,,  IBM  370  series). 

The  basic  security  pioblems  for  personal  computers  are 
the  same  as  those  for  every  other  computing  environment: 
applications  require  secrecy,  integrity  and  availability 
applied  to  programs  and  data.  However,  security  problems  of 
personal  computers  are  more  serious  than  those  of  mainframes 
or  mini  computers  due  to  the  lack  of  security  tools  and 
mechanisms.  Many  of  the  hardware  and  software  facilities 
important  in  assuring  security  are  inappropriate  and 
unavailable  ir.  the  personal  computer  environment . 

The  security  problem  of  personal  computers  is  becoming 
even  more  meaningful  as  these  machines  are  being  integrated 
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into  computer  networks.  While  many  personal  computers  are 
being  used  in  a  stand-alone  mode,  others  are  being  connected 
to  networks  as  front-end  terminals  and  processors,  becoming 
a  weak  link  in  the  network  security  chain.  This  problem 
becomes  more  crucial  in  the  open  system  interconnection 
(OSI)  environment.  As  the  goal  of  an  OSI  environment  is 
approached  it  becomes  easier  and  more  economical  to  connect 
computers  and  share  resources.  Logically,  more  PCs  will  be 
integrated  into  network  systems.  As  a  result,  national 
organizations  as  well  as  users  are  becoming  concerned  with 
the  vulneraUsility  of  personal  computers  (NCSC,  1985;  NTISSC, 
1987;  Post  and  Kievit,  1991) . 

As  the  name  implies,  personal  computers  were  initially 
envisioned  as  being  used  by  one  person.  Simple  physical 
security  measures  would  supply  the  necessary  measure  of 
security.  This  single  user  view  is  evident  in  the  design  of 
the  popular  personal  computer  operating  system,  MS-DOS.  In 
most  organizations  today  however,  PCs  are  not  personally 
allocated  (Gogan,  1991) .  In  view  of  this,  more  security  is 
sometimes  required.  There  is  a  definite  lo:.ck  of  tools  to 
provide  security  for  personal  computers. 

As  the  popularity  and  power  of  personal  computers  grows, 
more  people  want  and  obtained  access  to  them.  Personal 
computers  distribute  computing  power  to  virtually  all 
physical  locations  within  an  organization,  unlike  large 
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machines.  For  the  first  time  the  computing  power  is  not 
under  the  control  of  computer  professionals.  Persons 
responsible  for  mainframe  or  mini-computer  security  have 
limited  control  over  how  personal  computers  were  being  used 
within  organizations.  Generally,  personal  computer  users 
lack  the  sensitivity  toward  computer  security  issues 
exhibited  by  mainframe  and  mini  computer  operators.  The 
personal  and  organizational  computer  security  mechanisms 
evident  in  large  systems  are  not  automatically  in  place  for 
personal  computers. 

A.  BAJRDWABS 

The  first  IBM  personal  computer  was  built  around  the 
8088  processor.  This  processor  had  no  protection  scheme. 

All  memory  locations  were  open  and  unguarded.  There  were  no 
privileged  instructions  available  only  to  the  operating 
system  or  trusted  kernel.  The  newer  80286  and  80386  CPUs 
have  stronger  protection  capabilities  but  the  MS-DOS 
operating  system  is  not  capable  of  exploiting  them  (Post, 
1991;  Pfleeger,  1989) . 

Common  hardware  add-on  security  measures  include 
physical  security  measures,  security  modules,  and  locks  and 
keys .  Each  provides  various  degrees  of  security  against 
certain  types  of  threats  while  exhibiting  weaknesses  against 
others . 
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Locking  doors  to  rooms  containing  computers  is  effective 
but  in  most  cases  not  feasible.  Too  often  it  is  necessary 
to  allow  open  access  to  a  room  containing  the  computer. 
Disconnecting  and  locking  the  computer's  keyboard  in  a  desk 
drawer  or  czdsinet  provides  good  security  without  limiting 
access  to  an  office  space.  Unfortunately,  physical  security 
measures  limit  access  to  all  of  the  computer's  programs,  not 
just  the  sensitive  ones.  This  weakness  can  lead  to  under¬ 
use  of  computer  assets. 

Security  modules  are  expansion  boards  which  plug  into 
industry  standard  slots  on  personal  computer  motherboards  to 
provide  security.  They  usually  perform  in  concert  with 
software  utilities.  Security  modules  usually  prevent 
booting  from  other  than  the  fixed  hard  disk  drive.  This 
ensures  that  access  control  software  stored  on  the  fixed 
disk  is  run  upon  boot-up.  Because  the  modules  must  plug 
into  standard  slots  for  compatibility  reasons  it  would  be 
easy  for  an  intruder  to  locate  and  remove  them.  Many  casual 
personal  computer  users  possess  sufficient  knowledge  to 
quickly  open  a  computer's  case,  identify  specific  expansion 
boards  and  remove  the  security  module  (Stephenson,  1989; 
Zarger,  1988)  . 

Key  type  locks  coupled  to  power  switches  are  often  used 
in  personal  computers  as  security  measures.  These  locks  are 
an  "all  or  nothing"  device.  Those  who  have  a  key  have 
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access  to  all  programs  and  data  and  those  who  do  not  have  a 
key  have  access  to  nothing.  They  cannot  provide  universal 
access  to  public  applications  and  provide  security  for 
private  progrsuns  and  data.  Additionally,  locking  power 
switches  can  be  defeated  quite  easily  if  the  computer  is 
housed  in  a  standard  case.  Once  the  standard  "easy  access" 
case  is  opened,  it  is  a  simple  matter  to  "hot  wire"  the 
switch  to  defeat  the  lock. 

Hardware  security  solutions  are  enhanced  when  cases  and 
fasteners  are  used  which  are  non-standard  and  require 
special  tools  or  keys  for  access  or  removal.  Additionally, 
epoxy  coatings  are  useful  in  protecting  hardware  items  from 
tampering  measures  such  as  hot  wiring  switches .  As  with 
most  security  issues,  using  optimum  combinations  of  security 
measures  greatly  enhances  personal  computer  security 
effectiveness . 

B .  SOFTWARE 

Any  computer  system  has,  usually,  two  different  types  of 
software:  an  operating  system  and  application  programs.  The 
operating  system  consists  of  the  system  programs,  command 
interpreter,  and  utilities.  The  operating  system  is  the 
focal  point  for  exploring  security  issues .  Application 
programs  are  those  which  accomplish  processing  desired  by 
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the  computer  user.  Application  programs  make  calls  to,  or 
use,  the  operating  system  to  accomplish  lower  level  tasks. 

1 .  OP^^Ating  Systems 

The  operating  system  is  the  inner-most  software 
layer  of  a  computer  system  according  to  the  "virtual 
machine"  model  (Tanenbavim,  1990)  .  It  accomplishes  tasks  for 
users  and/or  the  application  programs  and  shields  them  from 
complex  hardware  details.  Transparent  to  users  and 
applications,  the  function  of  the  operating  system  is  to 
present  the  user  with  the  equivalent  of  an  extended  machine 
or  virtual  machine  that  is  easier  to  program  thrn  the 
underlying  hardware.  Its  primary  task  is  to  keep  track  of 
resource  usage,  to  grant  resource  recjuests  and  account  for 
their  usage,  and  to  mediate  conflicting  requests  from 
different  programs  and  users  (Tanenbaum,  1987) . 

At  their  advent,  personal  computers  were  initially 
equipped  with  4  KB  of  main  memory.  The  operating  system  had 
to  be  small  encogh  to  be  loaded  into  this  small  memory  space 
and  still  leave  room  for  an  application  program  to  run.  The 
early  developers  of  personal  computers  and  their  operating 
systems  did  not  expect  these  machines  to  grow  in  popularity 
as  they  have.  The  operating  system  was  written  to  provide 
compactness  and  functionality  in  a  "personal"  environment. 
This  meant  one  user,  one  program  at  a  time.  Under  MS-DOS, 
anyone  with  basic  knowledge  can  access  and/or  change  any 
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file  or  memory  location.  The  current  trend  is  toward 
personal  computer  power  houses  shared  by  several  workers 
eible  to  run  several  applications  simultaneously  utilizing  up 
to  8  MB  of  main  memory.  With  multiple  users  instead  of  the 
envisioned  personal  use,  MS-DOS  does  not  provide  any  measure 
of  security.  In  examining  MS-DOS  it  is  clear  that  it  has 
limitations  which  cripple  its  capability  to  grow  into  a 
full-fledged  operating  system  capable  of  supporting  and 
managing  systems  which  are  now  in  demand. 

MS-DOS's  major  limitation  is  that  when  conceived,  it 
allotted  only  enough  bits  in  its  address  format  to  access  a 
maximum  of  640  kilobytes  of  main  memory  directly.  This 
limit  remains  in  place  today  because  of  market  pressures  for 
downward  compatibility.  The  most  powerful  applications 
programs  tend  to  use  most  of  the  640  kb  of  memory  leaving 
only  enough  for  the  underlying  operating  system.  To  install 
security  mechanisms  in  MS-DOS  would  undoubtedly  reduce  the 
memory  space  available  for  use  by  application  programs  to  an 
even  lower  value.  It  seems  that  the  mar/cet  pressure  for 
freeing  up  memory  for  applications  is  far  greater  than  any 
pressure  to  add  security  functions  to  MS-DOS . 

Although  most  operating  systems  for  large  systems 
provide  adequate  security  functions,  MS-DOS  continues  to 
serve  as  the  personal  computer  standard  with  virtually  no 
security  capability.  Market  pressure  for  compatibility  and 
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maximum  application  space  will  defeat  any  move  to  retrofit 
MS-DOS  with  security  functionality. 

2 .  Utilities 

Utilities  are  separate  system  programs  that 
accomplish  tasks  for  users.  Their  normal  function  is  system 
management.  Since  they  are  optional ,  commercial  software 
programs  are  not  written  to  use  them.  Utility  programs  are 
very  important  in  security  of  personal  computer  systems. 
Because  the  operating  system  has  no  security  capability, 
personal  computer  users  often  use  utility  programs  to 
protect  their  data  and  programs.  There  are  several 
different  ways  in  which  utility  programs  are  commonly  used 
for  security  in  the  personal  computer  environment.  These 
include  encryption  of  data,  password  hard  disk  drive  locks 
with  or  without  hardware  locks,  and  disk  residue 
eliminators.  The  best  commercially  available  solutions 
include  elements  of  all  three  (Stephenson,  1989) . 

Encryption  of  data  using  utility  programs  provides 
excellent  security  of  data.  The  application  program  can  be 
run  by  intruders  but  the  data  they  receive  will  be  nonsense 
unless  first  decrypted.  Encryption  and  decryption  can  be 
accomplished  automatically  using  batch  command  files.  There 
are  two  limitations  which  come  to  mind  in  using  data 
encryption  utilities .  Data  file  encryption  and  decryption 
are  disk  intensive  activities  and  consequently  are  very 
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slow.  Additionally,  simply  securing  the  data  does  not  keep 
intruders  from  running  the  application  program.  It  simply 
keeps  the  intruder  from  understanding  the  data.  In  some 
cases  it  may  be  desirable  to  ensure  intruders  are  unable  to 
run  the  application  program  at  all. 

Password  hard  disk  drive  boot  locks  are  programs 
which  require  password  authentication  to  boot  and 
subsequently  access  the  hard  drive.  They  are  fast,  compact 
and  work  well  against  casual,  novice  intrusion  attempts. 
Without  hardware  enhancements,  however,  they  can  be  bypassed 
if  the  intruder  boots  the  computer  from  a  bootable  MS-DOS 
floppy  (Stephenson,  1989)  . 

Additionally,  access  to  even  non-sensitive  programs 
on  the  protected  system  requires  password  authentication. 
This  limits  the  use  of  computer  resources  to  trusted 
password  holders  only.  In  many  cases  it  is  desirable  to 
secure  only  a  portion  of  the  functions  the  personal  computer 
helps  perform. 

Other  utilities  rid  secondary  memory  of  residue. 

When  files  on  personal  computers  are  deleted  their  data 
remains.  The  operating  system  simply  deletes  the  file  from 
the  directory,  rendering  it  unlocatable.  Intruders  can  read 
or  copy  portions  of  the  memory  media  in  search  of  sensitive 
data.  Simply  deleting  files  does  not  protect  the 
information.  Utilities  such  as  Norton's  wipe  disk  and  wipe 
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file  rewrite  the  disk  or  file  entirely  with  meaningless 
data.  This  destroys  all  residue  left  from  sensitive  files. 

These  types  of  utilities  are  often  bundled  with 
hardware  which  disallows  booting  from  any  disk  except  the 
one  protected  by  the  software. 

3 .  Applications 

Application  prograuns  are  the  outer  layer  of  software 
in  the  virtual  machine  model.  The  application  software  is  a 
program  which  interfaces  with  the  user  and  ensures  that  the 
tasks  the  user  wishes  to  accomplish  are  completed.  The 
application  program  makes  calls  to  the  operating  system  to 
accomplish  low  level  tasks  in  order  for  the  application  to 
accomplish  tasks  initiated  by  the  user.  The  application 
software  is  shielded  from  hardware  details  by  the  operating 
system. 

The  operating  system,  MS-DOS,  provides  no  security 
capability  and  utilities  leave  possible  back  doors  and 
require  password  access  procedures  for  all  applications.  If 
application  programs  provide  their  own  security  capability 
only  programs  which  require  security  would  require  passwords 
for  access.  Moreover,  common  back  doors  associated  with 
security  utility  programs  are  closed  to  intruders  when 
application  programs  contain  protection  schemes. 

Application  programs  that  need  no  protection  are  not  limited 
by  running  under  a  larger,  hypothetical,  security-capable 
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operating  system  which  would  use  more  of  the  640  kb  main 
memory  than  the  unprotected  MS-DOS.  A  minor  drawback  to 
applications  providing  their  own  protection  is  that  the 
consequential  increase  in  program  size  occurs  in  each 
secured  ''.pplication  program.  This  is  a  minor  drawback  as 
the  additional  required  disk  storage  space  would  small.  The 
additional  RAM  would  be  required  only  by  programs  needing 
protection,  thereby  freeing  maximum  main  memory  for  larger 
unprotected  programs. 

C.  DATA 

Two  views  of  data  security  prevail:  protection  against 
inadvertent  data  loss  and  protection  of  unauthorized  access 
to  sensitive  data.  Inadvertent  data  loss  is  a  problem  of 
valuable,  but  not  necessarily  sensitive,  data  (Mensching  and 
Adams,  1991) .  Procedures  for  precluding  inadvertent  data 
loss  have  been  common  knowledge  since  the  personal 
computer's  inception  and  will  not  be  addressed  here.  Since 
the  operating  system  as  described  previously  provides  no 
built-in  file  protection  measures,  data  file  encryption  must 
be  used  to  secure  data  in  personal  computers . 

Utilities  are  commonly  used  to  encrypt  and  decrypt  data 
files  to  ensure  protection  of  sensitive  data.  Some  hardware 
add-on  boards  also  possess  the  capability  to  automatically 
encrypt  and  decrypt  data  files.  There  are  many  different 
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algorithms  to  encrypt  and  decrypt  data.  Some  of  which  are 
considered  to  be  safer  than  others.  The  Data  Encryption 
Standard  (DES)  is  the  most  common  one,  initially  developed 
for  the  U.S.  government  for  use  by  the  general  public. 

D.  PERSONNEL 

Sensitivity  to  security  issues  and  an  attitude  of 
responsibility  on  the  part  of  all  users  in  a  personal 
computer  environment  are  necessary  for  other  measures  to 
succeed  in  providing  security.  Whereas  mainframes  and  other 
large  systems  have  separate  locked  rooms  and  expert 
operators  shielding  them,  personal  computers  are  vulnerably 
distributed  throughout  an  organization.  For  instance,  no 
security  system  can  succeed  if  a  user  leaves  the  area  while 
a  sensitive  application  is  running.  No  matter  how  strong 
the  security  system,  it  is  useless  unless  personnel  have  a 
healthy  attitude  toward  security  and  are  sensitive  to 
possible  threats  (Pfleeger,  1989) . 


III.  THE  RELAY  RACE  APPROACH 


A.  INTRODUCTION 

In  view  of  the  personal  computer  operating  system' s 
inability  to  provide  security  and  the  limitations  associated 
with  security  modules  and  utilities,  it  becomes  worthwhile 
to  explore  new  techniques  for  securing  individual 
application  progreuns.  Three  major  threats  to  the  security 
of  an  application  can  be  countered,  to  include  unauthorized 
execution  of  the  main  program,  data  disclosure  and 
unauthorized  execution  of  parts  of  the  program  by  executing 
subprograms  directly.  Traditional  methods  cover  encryption 
of  data  files  and  securing  main  programs,  while  the  Relay 
Race  Approach  extends  protection  to  the  subprogram  level. 

1.  Application  Accaaa  Control 

Personal  computers  are  often  used  by  different 
individuals  running  different  application  programs  (Gogan, 
1991) .  In  most  cases,  all  applications  are  stored  on  the 
same  hard  disk  drive.  Allowing  access  to  certain  programs 
by  certain  individuals  while  limiting  access  to  valid  users 
of  other  protected  programs  stored  on  the  same  disk  is  no 
trivial  task  in  the  PC  environment.  Since  the  MS-DOS 
operating  system  provides  no  security  kernel,  the  solutions 
must  be  coded  into  the  application  programs.  Each 
application  program  must  check  for  access  authorization  and 
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take  required  measures  to  secure  itself  against  intrusion. 
Ihis  is  usually  accomplished  by  an  application-oriented 
Password  checking  scheme  which  protects  the  application  at 
the  main  menu  level. 

2.  Data  File  Security 

Intrusion  is  usually  for  the  purpose  of  achieving 
access  to  the  system  data.  One  intrusion  technique  is  to 
bypass  the  application  programs  entirely  and  attempt  to  gain 
access  to  the  system  data  files  directly.  An  intruder  could 
simply  browse  the  file  or  copy  it  for  later  examination  at 
another  computer.  To  overcome  this  problem,  data  files  must 
be  encrypted. 

3 .  Intra-application  Controls 

The  growth  in  application  software  capabilities  and 
the  conseqi''int  growth  in  size  has  dictated  that  applications 
be  designed  as  a  collection  of  programs.  In  such  a  scheme, 
a  main  program  calls  on  subprograms  to  accomplish  specific 
tasks  in  support  of  the  system.  The  main  program  can  be 
secured  with  a  password-checking  scheme  to  prevent  its 
unauthorized  execution.  However,  access  to  functions  and 
data  can  sometimes  be  achieved  by  executing  subprograms 
directly  without  the  main  program,  as  depicted  in  Figure 
3.1.  To  preclude  this  type  of  intrusion  some  method  of 
ensuring  that  all  subprograms  are  called  by  their  proper 
calling  programs  or  subprograms  must  be  devised.  The 


16 


Figure  3.1 :  Pas:.'^  orcl  Encryption 
Spht  ':s  of  Piolcclion 


approach  explored  in  this  research  will  be  called  the  relay 
race  approach. 

B.  IMPLEMENTATION  CONCEPTS 

In  order  to  counter  the  three  threats  three  methods  of 
protection  are  implemented  in  The  Relay  Race  Approach.  The 
first  two  measures  are  commonly  used  in  the  personal 
computer  environment  in  an  attempt  to  secure  applications. 
One  is  basic  password  checking  upon  execution  ensures  user 
authorization,  and  the  second  employs  automatic  data 
encryption,  decryption  and  deletion  preclude  theft  of  raw 
data  files.  However,  to  preclude  program  execution  via  an 
unprotected  subprogram,  all  subprograms  will  check  for  a 
parameter  which  can  only  be  valid  if  the  subprogram  was 
called  via  the  main  program  as  illustrated  in  Figure  3.2. 
This  is  a  unique  measure  applied  to  individual  application 
programs  and  it  is  from  this  third  measure  that  the  approach 
receives  its  name.  In  much  the  same  way  relay  racers  must 
pass  a  baton  or  be  disqualified,  subprograms  must  receive  a 
certain  parameter  and  pass  it  to  subsequent  subprograms  or 
the  program  execution  will  be  halted  by  the  security  system. 

1.  Password  Storage  and  Management 

There  are  two  methods  of  storing  valid  passwords  to 
be  used  by  the  system  to  authenticate  users:  including  valid 
passwords  in  program  source  code  and  storing  valid  passwords 
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in  encrypted  data  files.  Including  passwords  in  source  code 
provides  simplicity  and  security  but  requires  recompilation 
for  each  password  change.  Using  encrypted  data  files 
containing  valid  passwords  precludes  requirement  for  source 
code  dissemination  to  user/  administrator  but  requires 
thoughtful  implementation  to  ensure  security.  An  intruder 
could  encrypt  his/her  own  password  file  with  a  different  key 
and  replace  the  real  password  file  with  his/her  version 
(same  filename) .  In  order  to  defeat  this  intrusion  scheme 
the  system  must  check  to  determine  whether  the  password  file 
is  real  or  one  planted  by  an  intruder.  The  valid  password 
file  will  contain  a  password  to  be  checked  against  one  in 
the  compiled  code.  The  intruder's  file  would  not  work  if  it 
did  not  contain  this  file  checking  password.  A  combination 
of  both  encrypted  data  file  and  compiled  password  ensures 
security  and  precludes  source  code  dissemination  and 
recompilation  for  routine  password  changes. 

2.  Baton  and  Baton  Passing 

In  order  to  ensure  that  subprograms  are  executed 
only  when  called  by  proper  calling  programs  a  global 
variable,  or  pareuneter,  can  be  set  upon  password 
authentication  and  passed  from  the  main  program  to  the 
called  subprograms.  Subprograms  can,  in  turn,  pass  the  same 
parameter  to  any  subprograms  they  call.  Each  subprogram  can 
begin  execution  by  checking  this  parameter  before  executing 
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further  and  halt  processing  if  the  parameter  is  invalid. 

This  is  analogous  to  a  relay  race  at  a  track  meet.  Without 
the  baton  being  properly  passed  and  received  the  relay  team 
cannot  complete  the  race. 

3.  Data  File  Encryption 

Two  types  of  encrypted  data  files  are  required  for 
the  relay  race  baton  scheme:  password  file  and  data  storage 
files.  The  password  file  is  decrypted,  and  the  decrypted 
file  is  then  read  and  deleted.  The  decryption  process 
leaves  the  encrypted  file  intact  so  that  when  the  system 
deletes  the  decrypted  files,  the  original  encrypted  password 
file  remains  for  use  in  future  access  attempts.  Data 
storage  files  must  be  decrypted  for  reading  and  recrypted  if 
new  data  is  added  or  other  changes  are  made.  Once  again  all 
files  decrypted  during  a  process  need  to  have  the  decrypted 
copy  deleted  as  soon  as  possible  after  they  are  re¬ 
encrypted  . 
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IV.  APPLICHTIOM  IN  A  THIRD  GENERATION  LANGUAGE  ENVIRONMENT 


A.  ENVIRONMENT  DESCRIPTION 

A  simple  test  application  was  developed  in  compiled  MS- 
BASIC.  BASIC  was  chosen  as  the  third  generation  language 
for  a  prototype  due  to  its  relatively  low  power  and 
programmers'  wide  exposure  to  it.  If  the  relay  race  scheme 
can  be  implemented  in  BASIC/  it  is  reasonable  to  assume  that 
it  is  possible  to  implement  it  in  any  of  the  known  third 
generation  languages. 

B.  APPLICATION  DESCRIPTION 

The  prototype  application  is  a  simple,  menu-driven, 
maritime  minefield  planning  program  designed  to  minimize  the 
necessity  for  accurate  small  scale  plotting  on  geographic 
charts.  The  program  has  options  to  input  planning  data, 
calculate  mine  drop  instructions,  save  instructions  to  disk, 
and  print  instructions.  The  application  programs  and  data 
are  protected  using  The  Relay  Race  Approach. 

The  MS-DOS  directory  presentation  for  the  application  is 
provided  in  Figure  4.1.  BASRUN20.EXE  is  a  runtime  package 
required  for  applications  compiled  separately  such  as  the 
minefield  planning  application.  MFPLAN.EXE  is  the  main 
program  containing  password  checking  code  and  opening  menu. 
The  remaining  .EXE  files  are  subprograms  which  accomplish 
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the  application's  tasks.  $ED.MNQ  and  $ED.NMQ  are  encrypted 
data  and  password  files  respectively. 


$ED 

MNQ 

560 

5-19-91 

9:24p 

$ED 

NMQ 

128 

2-10-91 

6:57p 

BASRUN20 

EXE 

63046 

6-25-85 

4:42p 

MFPLAN 

EXE 

3415 

5-19-91 

7:55p 

MINECALC 

EXE 

4615 

5-19-91 

7:56p 

MINEPRNT 

EXE 

2503 

5-19-91 

7:57p 

MINESAVE 

EXE 

2887 

5-19-91 

7:56p 

MLRETREV 

EXE 

2279 

5-19-91 

7:57p 

Figure  4.1:  MS-DOS  Directory  presentation  of 

the  application 


The  threat  of  intrusion  via  subprogram  defeating  the 
password  authorization  and  data  encryption  without  baton 
passing  is  illustrated  in  a  structure  chart  of  an  intrusion 
attempt  (Figure  4.2).  When  unprotected,  an  intruder  needs 
only  to  write  a  small  BASIC  program  to  call  MLRETREV.EXE  and 
MINEPRNT.EXE  in  order  to  gain  access  to  the  system's 
sensitive  data.  By  combining  password  checking,  data 
encryption  and  the  Relay  Race  Approach,  this  intrusion  is 
thwarted  (Figure  4.3). 


C.  TRANSFORMING  CONCEPTS  TO  CODE 

1.  Handling  Passwords  and  tha  Baton 

The  first  operation  the  scheme  must  accomplish  is 
password  checking.  This  operation  is  be  accomplished  as 
early  as  possible  in  the  application.  Figure  4.4  contains 
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Intruder.exe 


Figure  4.2:  Siniclure  chart  illustrating 
how  an  intruder's  program  could  call 
subprograms  and  achieve  data 
access. 


the  required  BASIC  source  code  to  handle  passwords  and 
password  checking  and  initialize  the  security  baton.  Line  9 
allows  the  program  to  be  recalled  from  subprograms  without 
requesting  a  password  each  time  the  main  menu  appears. 

Lines  40/  50  and  60  blank  the  display  screen  for  password 
entry,  input  password  and  return  normal  function  to  the 
display  screen.  Line  70  creates  a  decrypted  copy  of  the 
valid  password  file  and  names  it  "PWORD.DAT".  During  the 
execution  of  the  "RCRYPT"  program,  the  user  will  be  prompted 
to  enter  an  encryptation  key  twice.  Line  80  opens  the 
PWORD.DAT  file  for  input.  Lines  90,  100,  110  initialize 
several  varizOsles  to  be  used:  N,  a  loop  counter;  FOUND$,  a 
flag  indicating  wether  a  password  is  found  to  be  valid  or 
not;  and  BATON$,  the  global  variable  or  parameter  passed  to 
subprograms  to  verify  that  access  authorization  has  been 
checked  prior  to  subprogram  execition.  If  the  password  file 
is  found  to  be  empty,  line  120  will  call  the  violation 
routine,  (lines  220-290) .  Lines  140  and  150  input  and  check 
the  first  entry  in  the  password  file  and  ensure  it  is 
"scud".  This  defeats  intruders  who  might  plant  their  own 
encrypted  password  file  in  place  of  the  original.  If  an 
imposter  password  file  is  detected  the  violation  routine  is 
run.  Lines  160-200  are  the  password  checking  loop  where  the 
input  password  (PASSWORD$)  is  checked  against  each  valid 
password  in  the  file  (VALIDPWORD$ (N) ) .  If  end  of  file  (EOF) 
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is  reached  without  a  match  the  violation  routine  is  run.  If 
a  match  is  found,  lines  300-320  are  run  in  order  to  close 
the  password  file,  delete  it  and  set  the  security  baton 
(BATON$)  valid.  This  allows  subprograms  to  be  called  and 
run.  The  violation  routine  (lines  220-290)  also  closes  and 
deletes  the  password  file.  Lines  240-260  provide  a  pause 
situation  allowing  displayed  text  message  to  be  read  by 
users  before  continuing  program  execution.  Lines  350  to  450 
represent  location  of  functioning  non-security  related 
application  code. 
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9  IF  BATON$  =  "VALID"  then  GOTO  330 

10  LOCATE  13,10 

20  PRINT  "Enter  your  password  and  press  ENTER." 

30  LOCATE  15,15 
40  COLOR  0 

50  INPUT  PASSWORD$ 

60  COLOR  7 

70  SHELL  "RECRYPT  $ED.NMQ  PWORD.DAT" 

80  OPEN  "PWORD.DAT"  for  INPUT  as  #1 

90  N  »  0 

100  FOUNDS  »  "F" 

110  BATONS  -  "INVALID" 

120  IF  EOF(l)  GOTO  220 
140  INPUT#  1,  FILECHKS 

150  IF  FILECHKS  «  "scud"  then  GOTO  160  else  GOTO  220 
160  IF  EOF(l)  GOTO  220 
170  N  -  N  +  1 

180  INPUT#1,  VALIDPWORDS (N) 

190  IF  PASSWORDS  »  VALIDPWORDS (N)  THEN  FOUNDS  *  "T" 
200  IF  FOUNDS  »  "T"  then  GOTO  300  else  GOTO  160 
210  LOCATE  17,10 
220  PRINT  "Security  Violation!" 

230  LOCATE  19,10 

240  PRINT  "Press  any  key  to  continue." 

250  AS  «  INKEYS 

260  IF  AS  -  ""  then  250 

270  CLOSE  1 

280  KILL  "PWORD.DAT" 

290  GOTO  500 

300  CLOSE  1 

310  KILL  "PWORD.DAT" 

320  BATONS  »  "VALID" 

330  (MINEFIELD 
400  PROGRAM 
450  BODY) 

500  END 


Figure  4.4:  Code  required  to  check  user's  password 

and  set  "baton"  variable 


2.  Called  Subprogram  Raquiraments 

Subprograms  require  very  little  additional  code  to 
accomplish  the  relay  race  scheme.  As  the  baton  is  passed  by 
the  COMMON  mechanism  (sharing  variables  and  values  among 
programs) ,  a  simple  check  of  the  security  baton  (BATON$) 
must  be  made  before  each  program  execution.  If  the  value 
passed  by  this  variable  is  valid/  execucion  continues.  If 
the  value  passed  by  this  variable  is  found  to  be  invalid,  it 
means  that  the  subprogram  was  called  without  valid  password 
authentication.  A  violation  routine  is  run  and  the  program 
is  aborted.  Required  source  code  for  subprograms  is 
presented  in  F j  gure  4.5. 


3  OPTION  BASE  1 

4  DIM  YTD(IO)  ,TTD(10) 

5  COMMON  BATON$,NA$,LAH$/IPLAD/IPLAM, IPLAS,LOH$, 
IPLOD , IPLOM, IPLOS , SPD, TRK, N, YTD ( ) , TTD ( ) 

20  IF  BATON$  =  "VALID”  GOTO  30  ELSE  GOTO  60 
30  (PROGRAM 

40  - 

50  BODY) 

60  LOCATE  17,10 

70  PRINT  "Security  Violation!" 

80  LOCATE  19,10 

90  PRINT  "Press  any  key  to  continue." 

100  A$  =  INKEY$ 

110  IF  A$  =  ""  then  110 
120  END 


Figure  4.5:  Code  required  in  subprograms 
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3.  Data  Encryption,  Decryption  and  Acceas  Requirements 

a.  Data  Encryption  Utility 

The  encryption  program  used  in  this  prototype 
is  RCRYPT.COM,  an  MS-DOS  utility.  Many  different  data 
encryption  utilities  are  availed>le  and  most  will  work  within 
this  scheme.  The  application  may  need  to  be  modified 
slightly  depending  on  whether  the  encryption  utility 
requires  the  key  to  be  entered  on  the  command  line  as  a 
parameter  or  prompts  the  user  for  the  key  during  execution. 
The  RCRYPT.COM  utility  in  the  prototype  prompts  for  the  key 
during  execution. 

b.  Data  Film  Manipulation 

This  prototype  ufes  one  password  file  and  one 
data  file.  A  flat  file  of  records  is  used  because  data  for 
this  application  is  small  and  response  time  is  not  a 
critical  issue.  AS  shown  in  Figure  4.6  most  of  the  data 
manipulations  focus  on  decrypting  and  reading  data.  One 
subprogram  (MINESAVE)  allows  for  appending  data  to  the  data 
file.  This  case  requires  decrypting  the  data  file, 
appending  new  data  to  the  file  and  re-encrypting  the  file. 
The  source  code  required  for  this  operation  is  presented  in 
Figure  4.7. 
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Figure  4.6:  Description  of  data  file  manipulations 
for  each  of  the  programs  in  the  Basic 
prototype  application. 


40  PRINT  "What  name  would  you  like  to  call  the  data?" 
50  INPUT  NA$ 

60  SHELL  "RCRYPT  $ED.MNQ  MINE.DAT" 

70  OPEN  "MINE.DAT"  for  APPEND  as  #2 
80  WRITE  #2,NA$,LAH$,IPLAD,IPLAM, IPLAS,LOH$,IPLOD, 
IPLOM, IPLOS, SPD, TRK, N 
90  FOR  B  =  1  to  N 
100  WRITE  #2,YTD(B)  ,TTD(B) 

110  NEXT  B 
120  CLOSE  #2 

130  SHELL  "RCRYPT  MINE.DAT  $ED.MNQ" 

140  KILL  "MINE.DAT" 


Figure  4.7:  Code  required  for  data  file  manipulation 

in  MINESAVE  subprogram 
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c.  Syatmm  Admxniatration 

The  application  requires  a  system  administrator 
to  accomplish  certain  tasks.  These  tasks  include  steps  to 
start  the  system,  accomplishing  data  file  housekeeping  and 
changing  passwords.  Since  it  is  not  desirable  to  supply 
source  code  to  all  users,  the  application  deliverables 
should  include  information  indicating  what  the  first  entry 
in  the  password  file  needs  to  be.  This  entry  should  be 
unique  or  nearly  unique  among  different  copies  of  the 
application  to  preclude  one  systems  administrator  from 
intruding  into  another's  copy.  For  example,  line  150  Figure 
4.4  character  string  "scud"  (FILECHK$)  should  be  identified 
as  the  required  first  entry  in  the  password  file  and  should 
be  different  for  each  copy  of  the  application.  To  start  the 
system  the  administrator  should  add  his/her  desired 
passwords,  nine  at  most,  to  the  required  first  entry, 
encrypt  the  file  with  the  desired  case  sensitive  key  and  the 
name  "$ED.NMQ"  and  delete  the  un-encrypted  copy  of  the 
password  file. 

The  application  should  also  include  a  data  file 
with  one  set  of  test  data  included  to  preclude  the  system 
from  attempting  to  decrypt  and  append  to  an  empty  file.  A 
copy  of  this  original  data  file  should  be  maintained  by  the 
administrator  and  used  for  data  housekeeping  operations. 

The  data  file,  like  the  password  file,  needs  to  be  encrypted 
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and  named  in  accordance  with  lines  130  and  70  of  Figures  4.7 
and  4.4  respectively. 

Changing  the  passwords  should  be  done  regularly 
in  any  system  and  should  be  easy  to  accomplish  so  as  not  to 
discourage  changes  when  needed.  To  change  passwords,  run 
RCRYPT.COM  directly  on  the  $ED.NMQ  file  and  edit  the  file 
with  new  passwords.  The  required  first  entry  of  the  file 
should  not  be  changed  or  the  system  will  reject  the  new 
password  file  as  bogus.  Re-encryption  of  the  password  file 
using  a  new  encryption  key  is  needed.  Changing  the  k#*”  each 
time  passwords  are  changed  maximizes  security. 
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V.  APPLICATION  IN  A  FOURTH  GENERATION  LANGUAGE  ENVIRONMENT 


A.  ENVIRONMENT  DESCRIPTION 

The  Relay  Race  Approach  was  installed  into  a  previously 
implemented  DBaselV  database  application.  DBase  was  chosen 
because  of  its  widespread  familiarity  and  its  non-procedural 
nature.  If  the  approach  could  be  easily  grafted  into  an 
existing  DBase  IV  generated  application,  it  would  be  an 
effective  approach  for  securing  other  existing  applications. 

Fourth  generation  languages  are  often  used  in 
environments  where  end  users  build  applications.  Security 
may  not  be  considered  when  users  create  applications.  The 
Relay  Race  Approach  shows  promise  as  an  efficient  security 
measure  for  these  existing  end  user  applications. 

The  DbaselV  application  generator  allows  users  or 
developers  to  create  fully  functional  menu  driven  database 
applications  with  little  or  no  coding.  Database  structures, 
forms,  reports  and  queries  are  created  using  user  friendly 
graphical  interfaces  and  then  are  combined  to  work  together 
by  the  application  generator.  The  application  generator 
generates  source  code  with  comments  which  is  compiled  into 
object  code  that  can  be  run  either  in  the  DBase  IV 
environment  or  with  a  run-time  module. 
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B.  APPLICATION  DESCRIPTION 


The  application  is  the  user  version  of  an  automated  dive 
log.  It  is  used  for  users  to  enter  SCUBA  diving  events,  and 
query  reports  such  as  logs  or  qualification  reports  from  the 
database.  There  is  another  version  which  accesses  the  same 
database  which  is  used  by  the  system  administrator  for 
marketing  and  other  business  and  organizational  functions. 

The  application  accesses  four  database  files:  DIVER. DBF, 
SITE. DBF,  DIVE. DBF  and  QUAL.DBF.  It  uses  one  data  entry 
form  file,  DIVEFORM. SCR.  Two  query  (.QBE)  files  were 
slightly  modified  for  use:  JOINl.PRG  and  QUALLIST.PRG.  Two 
report  files  were  built  and  used:  LOG_REPO.FRM  and 
QUALRPT.FRM.  Finally,  the  application  generator  created  two 
program  files:  DLUSER.PRG  and  USERBAR.PRG. 

Since  the  Relay  Race  Approach  depends  on  passing 
parameters  between  programs,  the  structure  of  the 
application  must  be  understood  before  the  approach  can  be 
installed  into  an  existing  application.  Since  the  source 
code  was  95  percent  generated  by  DbaselV  the  application 
must  be  reverse  engineered,  yielding  a  structure  chart 
needed  for  understanding.  Figure  5.1  is  the  structure  chart 
for  the  application.  Only  JOINl.PRG  and  QUALLIST.PRG  can 
access  the  data,  so  only  procedures  which  can  possibly  call 
them  need  to  have  the  additional  source  code  installed. 
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These  are  DLUSER  and  MPDEF  in  DLUSER.PRG  file,  ACT03,  ACT04 
in  USERBAR.PRG  file,  and  JOINl.PRG  and  QUALLIST.PRG  files. 

C.  TRANSFORMING  CONCEPTS  TO  CODE 

1.  Handling  Passwords  and  tha  Baton 

Checking  password  validity  is  accomplished  first  and 
the  code  required  for  this  was  inserted  into  the  main 
program,  DLUSER.PRG.  Figure  5.2  shows  the  additional  source 
code  inserted  at  the  very  beginning  of  the  DLUSER.PRG  file. 
The  set  color  commands  ensure  that  the  password  is  not 
echoed  to  the  screen  when  the  user  types  their' s.  In  order 
to  get  the  prompt  "Enter  Password”  on  the  screen  and  not  the 
password  itself,  the  prompt  and  the  acceptance  of  the  value 
for  variable  "PWORD"  had  to  be  separated  by  the  set  color 
command.  This  is  why  the  ACCEPT  string  is  a  space.  Set 
color  is  used  again  to  return  the  screen  to  normal.  Since 
most  Dbase  IV  users  will  have  the  capability  to  compile 
programs,  the  passwords  were  compiled  rather  than  stor-^'  in 
an  encrypted  file.  The  logic  in  the  IF  /  ELSE  clause  is 
such  that  if  no  password  is  entered,  and  the  error  message 
which  occurs  is  "ignored"  by  the  user,  the  program 
VIOLATIO.PRG  will  be  run,  not  the  rest  of  DLUSER.PRG.  Dbase 
defaults  to  the  first  statement  when  an  error  is  encountered 
in  an  IF/ELSE  clause  and  the  user  selects  "IGNORE"  at  the 
error  prompt.  VIOLATIO.PRG  displays  a  violation  message  and 
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terminates  the  program.  If  the  password  is  found  to  be 
valid  the  data  files  are  decrypted.  Since  the  baton  in 
DBase  can  be  a  true  parameter  instead  of  a  shared  variable 
as  was  the  case  in  BASIC,  a  variable  does  not  need  to  be 
set.  When  a  procedure  is  called  it  simply  needs  to  be 
called  with  a  value  which  will  be  checked  by  the  called 
procedure.  Figure  5.3  illustrates  the  correct  syntax  for 
calling  programs  and  procedures  with  the  parameter  required. 


@3,3  SAY  "Enter  Password:  " 

SET  COLOR  OF  NORMAL  TO  B/B 

ACCEPT  "  "  TO  PWORD 

SET  COLOR  OF  NORMAL  TO  W+/B 

IF  (.NOT.  PWORD»"TIGRIS") .AND. (.NOT.  PWORD«"SCUD") 

.AND. (.NOT. PWORD- "BAGDAD") 

DO  VIOLATIO 
ELSE 

RUN  PKUNZIP  ADLDATA  -SiRAQ 
**  Rest  of  Program  ** 


Figure  5,2:  Code  required  for  password  checking  in 
the  main  program  for  the  Dive  Log  application. 


**  Calling  Program  or  Procedure  ** 
DO  MPDEF  WITH  "GOOD" 


**  Called  Program  or  Procedure  ** 
PARAMETER  BATON 
ON  ERROR  CANCEL 
IF  .NOT.  BATON  -  "GOOD" 

DO  VIOLATIO 
ELSE 

**  Rest  of  Program  ** 


Figure  5.3:  Code  required  for  calling  subprograms 
and  procedures  with  parameters. 
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2.  Call«d  Proc«dur«8  or  Subprograms  Raquiramsnts 

Called  sxabprograms  or  procedures  which  receive  the 
security  parameter  BATON  must  contain  the  PARAMETERS 
statement  as  shown  in  Figure  5.3.  It  was  discovered  during 
testing  that  if  an  intruder  attempted  to  call  a  subprogram 
or  procedure  directly  without  the  required  parameter,  Dbase 
displays  an  error  message  displaying  the  (IF  .NOT.  BATON  « 
"GOOD")  line  of  source  code  and  a  prompt  "PARAMETER  NOT 
FOUND" .  This  would  give  the  intruder  information  required 
to  successfully  call  the  subprogram  or  procedure  on  his  next 
attempt .  The  "ON  ERROR  CANCEL"  line  terminates  program 
execution  when  any  error  occurs  to  remedy  the  situation. 

The  IF/ELSE  clause  checks  for  the  security  baton  and  runs 
the  violation  procedure  or  the  rest  of  the  program 
accordingly. 

3.  Data  Encryption,  Decryption  and  Administration. 

Since  the  application  uses  four  different  data  files 
the  PKZIP/PKUNZIP  utility  programs  were  selected  for 
encryption  and  decryption  of  data  files.  It  allows  for 
compression  and  encryption  of  multiple  files  into  one  single 
file.  As  depicted  in  Figure  5.2  the  encryption  key  "IRAQ" 
is  compiled  into  the  program  instead  of  being  prompted  from 
and  entered  by  the  user. 

The  procedure  ACT05  in  the  USERBAR.PRG  file,  (Figure 
5.1),  is  executed  to  exit  the  system.  Data  encryption  and 
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residue  housekeeping  is  accomplished  here.  The  required 
code  is  shown  in  Figure  5.4 


RUN  PKZIP  ADLDATA  -m  -SIRAQ  *.DBF 

Figure  5.4;  Code  required  for  encrypting  data  files 
and  removing  the  decrypted  data  files. 

The  system  administrator  has  only  to  periodically 
recompile  the  source  code  changing  passwords  and  encryption 
keys.  Access  to  the  source  code  should  be  limited  to 
trusted  personnel  only  as  it  contains  information  which 
would  greatly  simplify  intrusion. 


40 


VI.  THE  RELAY  RACE  APPROACH  AMD  LOCAL  AREA  NETWORK  SECURITY 


The  explosion  of  personal  computers  in  the  workplace  has 
led  to  the  need  for  data  communication  and  asset  sharing 
eunong  an  organization's  Pcs.  Local  area  networks  (LANs) 
efficiently  provide  these  attributes  and  are  being  utilized 
extensively  today. 

A.  ELEMENTS  AMD  FUNCTIONALITY  OF  LANS 

LAN  implementation  includes  installing  LAN  hardware 
expansion  cards  in  the  computers  which  are  to  be  linked, 
linking  the  computers  together  using  a  cabling  system,  and 
installing  a  LAN  operating  system  on  the  machines.  One  of 
the  machines  is  designated  as  the  server  and  the  rest  are 
clients .  The  full  operating  system  resides  on  the  server 
while  only  a  shell  or  subset  resides  on  each  client.  In 
popular  PC  LANs  the  network  operating  system  still  utilizes 
MS-DOS  but  provides  added  network  functions . 

Communication  between  machines  or  nodes  in  a  network 
involves  multiple  communication  protocols.  Each  protocol 
level  uses  functions  provided  at  lower  levels  by  lower  level 
protocols . 

B.  SECURITY  IN  LANS 

Most  LAN  operating  systems  provide  security  functions 
capable  of  multi-level  security  of  files  and  physical 
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devices.  These  measures  combined  with  certain  physical 
security  measures  involving  the  network  server  can  protect 
assets  against  casual  intrusion  attempts.  However^  if 
physical  access  to  the  network  server  can  be  gained  an 
intruder  could  attempt  to  load  a  different  copy  of  the 
network  operating  system  onto  the  server  and  give  himself 
access  to  protected  files  and/or  devices.  Many  LANs  place 
printers  and  other  periphrials  along  side  the  server  and  the 
server  therefore  cannot  be  physically  isolated  from  the 
users  or  public. 

C.  ENHANCING  OVERALL  LAN  SECURITY 

Even  though  network  operating  systems  oftem  provide 
security  features,  the  Relay  Race  Approach  can  significantly 
strengthen  overall  security.  The  Relay  Race  Approach 
provides  efficient  security  at  the  application  layer 
complementing  security  features  implemented  at  the  LAN 
operating  system  layer.  For  example,  if  an  intruder  were 
capable  of  accessing  the  LAN  server,  load  a  different  copy 
of  the  LAN  operating  system  and  attempt  to  access  a 
protected  application,  additional  security  provided  by  the 
Relay  Race  Approach  would  significantly  hamper  his  attempts. 
The  additional  layer  of  security  would  most  likely  end  the 
intruder's  attempt:  at  least  for  that  session. 

Additionally,  combining  security  measures  implemented  at  the 
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LAM  operating  system  layer  with  those  at  the  application 
layer  can  reduce  requirements  for  "armor  plated"  physical 
security  measures  such  as  heavy  duty  locks,  doors  or 
ced)inets  for  the  network  server. 

Both  prototype  applications  were  installed  on  a  LAN. 

Both  executed  as  expected  and  illustrated  feasibility  of  the 
Relay  Race  Approach  as  a  security  measure  for  applications 
running  on  LANs. 
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VII .  CONCLUSIONS 


Persoiial  computer  security  is  an  issue  of  increasing 
importance  to  computer  professionals.  It  is  valuable  to 
explore  efficient  methods  of  providing  or  enhancing  PC 
security.  The  Relay  Race  Approach  provides  or  enhances 
security  in  the  PC  environment  efficiently.  The  Approach 
can  be  strengthened  using  deceptive  measures  to  thwart 
intrusions  by  all  but  those  thoroughly  familiar  with  the 
application  source  code. 

A.  THE  NEED 

The  increased  need  for  PC  security  is  evident  in  view  of 
several  recent  trends.  First,  PCs  are  being  used  in  an 
increasing  number  of  different  business  areas.  These 
include  those  areas  where  sensitive  processing  is  common. 
Secondly,  more  persons  are  becoming  familiar  enough  with 
PC's  and  MS-DOS  to  be  considered  capable  of  casual  intrusion 
into  marginally  protected  PC  environments.  Finally,  the 
increase  in  public  sensitivity  to  privacy  of  information 
issues  dictates  the  need  for  increased  security  in  areas 
once  thought  to  be  of  a  non-sensitive  nature . 

B .  REQUIRED  ATTRIBUTES 

For  these  reasons  an  approach  with  the  following 
attributes  would  be  of  significant  value.  It  should  be 
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compact,  as  application  program  size  is  of  great  concern  in 
the  PC  environment.  The  approach  should  be  flexible  or 
multi-leveled,  that  is,  it  should  allow  public  access  to 
some  applications  and  limit  access  to  other  application (s) 
to  only  their  specified  set  of  authorized  users.  The 
approach  should  be  easy  to  implement,  even  in  existing 
applications.  Increasing  end-user  application  development 
makes  this  a  valuable  attribute.  The  Relay  Race  Approach 
exhibits  these  desired  attributes  and  is  strong  enough  to 
withstand  casual  attacks  from  intruders  with  strong 
knowledge  of  MS-DOS  and  PCs . 

C.  POSSIBLE  ENHANCEMENTS 

The  relay  approach  depends  on  the  premise  that  an 
intruder  does  not  have  access  to  the  application  source  code 
and  knowledge  of  how  the  approach  was  implemented  in  the 
application.  There  are  two  modifications  which  could 
enhance  security  just  in  case  knowledge  of  the  approach 
and/or  application  source  code  is  compromised:  unique 
application  copies  and  deceptive  and  dynamic  baton 
variables.  Additionally,  disk  file  residue  eliminators 
could  strengthen  security. 

1.  Unique  Application  Copies 

First,  it  would  be  important  to  make  different 
copies  of  the  application  utilize  unique  or  nearly  unique 
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password  files.  This  would  be  accomplished  by  compiling 
many  versions  of  the  program,  each  using  a  different  first 
entry  in  the  password  file  (the  password  file  check 
variable) .  This  would  defeat  an  intruder  who  might  have  one 
copy  of  the  application  and  attempt  to  insert  his  password 
file  into  another  system  and  using  it  to  gain  access  to  the 
other  system's  data. 

2.  Deceptive  end  Dynemic  Bmtons 

To  further  help  deceive  intruders  who  might  gain 
access  to  the  program  source  code,  the  "baton"  may  be 
concealed.  Suppose  in  the  Basic  application  the  baton 
variable  were  "MINEDIST#"  instead  of  "BATON"  and  was  of  type 
integer,  Figure  4.4.  This  would  slow  a  potential  intruder's 
conceptualization  as  he  browses  the  source  code  in  search  of 
security  hints.  Additionally,  dynamic  batons  can  be 
employed.  Such  a  baton  variable  can  be  set  to  valid 
indirectly  through  one  or  more  intermediate  variables  which 
might  appear  to  be  accomplishing  some  arithmetic  operations . 
The  value  given  to  the  baton  variable  may  also  change  often 
but  retain  some  characteristic  for  the  validity  check.  For 
instance,  the  baton  could  change  value  but  retain  even 
divisibility  by  17  and  the  validity  check  would  be  designed 
to  test  for  that. 
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3.  Disk  Fils  Residue  Eliminstors 


Finally,  using  a  filewipe  type  residue  eliminating 
program  instead  of  simple  MS-DOS  delete  command  in  the 
application  would  provide  an  extra  degree  of  security  to 
counter  random  disk  sector  searches. 

The  Relay  Race  Approach  provides  efficient,  casual 
security  for  personal  computer  applications  in  today's 
environment  of  increasing  PC  security  Threats. 
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Appendix  A:  Source  code  for  Minefield  Planning 

Application  in  BASIC. 


1  ’MFPLAN.BAS  •  Prototype  2  4-21-91  of  Relay  Race  Baton  PC  security  system. 

3  OPTION  BASE  1 

4  DIM  YTD(10),TTD(10) 

5 COMMON 

BATONS, NAS, LAH$.IPLAD,IPLAM,IPLAS,L0H$,IPL0D.IPL0M,IPL0S,SPD,TRK,N,YT 
D0,TTD0 

7DIM  VAUDPW$(10) 

8CLS 

9  IF  BATONS-"VALID’’  THEN  GOT0 140 
18  LOCATE  13,10 

20  PRINT  "Enter  your  password  and  press  ENTER." 

21  LOCATE  15,15 

22 '  *"**BLACKEN  SCREEN  TO  HIDE  PASSWORD  AS  IT  IS  ENTERED  & 

GET  PASSWORD 

23  COLOR  0 

24  INPUT  PASSWORDS 

25 '  ***"RESET 

SCREEN 

26  COLOR  7 

27  SHELL  "RCRYPT  SED.NMQ  PWORD.DAT" '  ****DECODE  FILE  OF  VALID 

PASSWORDS  AND  CHECK  USER'S  FOR  VALIDITY 

28  OPEN  "PWORD.DAT"  FOR  INPUT  AS  #1 
30  N-OiFOUNDS-T":  BATONS-’'INVALID" 

32  N-N+1 

34  IF  EOF(1)  GOTO  50 
36  INPUT#  1.VALIDPW$(N) 

38  IF  PASSWORD$-VALIDPW$(N)  THEN  FOUND$«T' 

40  IF  FOUND$-"T"  THEN  GOTO  60  ELSE  GOTO  32 

50  IF  FOUND$-"F"  THEN  CLS;LOCATE  17,10;PRINT  "Your  password  is  invalid, 
access  denied." 

51  '  *"**PAUSE  TO 

READ  MESSAGE 

52  LOCATE  19,10: PRINT  "Press  any  key  to  continue." 

54  A$-INKEY$;1F  A$«""  THEN  54 

56  CLOSE  1 : KILL  "PWORD.DAT  ‘  ****CLOSE  PASSWORD  FILE  &  ERASE  IT 

58  GOTO  240  ‘  ***"STOP 

60  CLOSE  1 :  KILL  "PWORD.  DA . 

62  BATON$-"VALID":'  *"**BU1LD  BATON 

80CLS 

90  LOCATE  5,5:PR1NT  "Welcome  to  Minefield  Planning.  A  simple  Basic  program  to" 
100  LOCATE  6,5:PRINT  "assist  in  planning  air  deployed  minefields.  Given  IP  lat" 

110  LOCATE  7,5:PRINT  "and  long,  hole  lat  &  long's,  track,  speed  and  trajectory" 

1^  LOCATE  8,5: PRINT  "the  program  will  calculate  and  securely  store  and/or " 

130  LOCATE  9,5:PRINT  "print  time  to  drop  and  distance  to  drop." 

140  LOCATE  11,10:PRINT  "MAIN  MENU" 

150  LOCATE  13,5: PRINT  "1  -  Enter  new  data  and  calculate  drops" 

155  LOCATE  14,5:PRiNT  "2  •  Retrieve  previously  stored  solution  from  disk" 
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160  LCX5ATE  15,5:PRINT  "3  -  Print  data  from  earlier  calculated  or  retrieved  line" 

165  LOCATE  16,5:PR1NT  "4  -  Save  current  mineline  calculations  to  disk" 

170  LOCATE  17,5:PRINT  "5  -  EXIT  SYSTEM" 

180  LOCATE  19,10: PRINT  "Enter  your  choice" 

190  INPUT  CH$ 

200  IFCH$**"1"THEN  CHAIN  "MINECALC"  ELSE  IFCH$-"2"THEN  CHAIN 
"MLRETREV"  ELSE  IF  CH$-"3"  THEN  CHAIN  "MINEPRNT"  ELSE  IF  CH$-"4"  THEN 
CHAIN  "MINESAVE"  ELSE  IF  CH$-"5"  THEN  GOTO  240 
210  CLS 

220  LOCATE  10.10:PRINT  "ERROR!  choose  1 , 2, 3, 4  OR  5" 

230  goto  80 
240  CLS:  END 


1  'MINECALC.BAS 

3  OPTION  BASE  1 

4  DIM  YTD(10),TTD(10) 

5 COMMON 

BATONS, NA$,LAH$,IPLAD.lPLAM,IPLAS,LOH$,lPLOD,IPLOM.lPLOS,SPD,TRK,N,YT 

do.ttdo 

7  DIM  HLAD(10).HLAM{10).HLAS(10). 
HLOD(10),HLOM(10),HLOS(10),HLAMX(10),HLA(10) 

8  DIM 

HLOMX(10),HLO(10),NSDIFF(10),EWDIFF(10).NSYDS(10),EWYDS(10),TOTYDS(10) 

9  DIM  TOTYDSCHK(IO) 

10  CLS 

20  IF  BATONS  -  "VALID"  GOTO  30  ELSE  GOTO  1065 
30  cls:LOCATE  2,5:PRINT  "Enter  Data  Below  Prompts." 

40  LOCATE  4,5:PRINT  "Is  I.P.  Utitude  N  or  S?  (CAPITALS)";INPUT  LAHS 
50  LOCATE  5,5:PRINT  "Degrees": LOCATE  5,15:PRINT  "Minutes" 

52  LOCATE  5,25:PR1NT  "Seconds" 

60  LOCATE  6,5:INPUT  IPLA>D:LOCATE  6,15 

61  IPUDR-IPLAD^O.MISQO/IBO 

62  INPUT  IPLAM:LOCATE  6,25:INPUT  IPLAS 

70  LOCATE  8,5:PRINT  "is  I.P.  Longitude  E  or  W?  (CAPITALS)":  IN  PUT  LOHS 
80  LOCATE  9,5:INPUT  IPLOD; LOCATE  9,15:INPUT  IPLOM:LOCATE  9,25:INPUT 
IPLOS 

90  LOCATE  11,5 

92  PRINT  "Enter  true  track  from  I.P.  to  holes  in  3  digits(001  *360)." 

94  INPUT  TRK 

95  TRKR-TRK*3.141 593/1 80 

100  LOCATE  13,5:PRINT  "Enter  groundspeed  in  knots.":INPUT  SPD 
110  LOCATE  14,5 

112  PRINT  "Enter  weapon  trajectory  in  yards  for  your  speed  and  altitude  (from 
TACREFMAN)." 

114  INPUT  TRAJ 

120  LOCATE  18,5:PRiNT  "Enter  number  of  mines  in  this  iine.":lNPUT  N 

121  CLS 

130  IPLAMX  -  IPLAM  +  (iPLAS/60) 

131  IPLA  -  IPLAD  +  (IPLAMX/60) 

132  IPLOMX  -  IPLOM  +  (IPLOS/GO) 

133  IPLO  »  IPLOD  +  (lPLOMX/60) 
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134  IF  (LAH$-"N'')  AND  (LOH$-'’W")  GOT0 140  ELSE  GOTO  372 

140  FOR  i  -  1  to  N 

150  LOCATE  2,20:PRINT  "Hole  "il 

160  LOCATE  3,5 

162  PRINT  "Latitude:  Deg  Min  Sec  Longitude:  Deg  Min  Sec" 

165  B-4+1 

170  LOCATE  B,15:INPUT  HLAD(I) 

171  LOCATE  B, 21  :INPUTHLAM(I) 

172  LOCATE  B,27:INPUT  HLAS(I) 

173  LOCATE  B,44:INPUT  HLOD(I) 

174  LOCATE  B,50:INPUT  HLOM(I) 

175  LOCATE  B,56:INPUT  HLOS(I) 

250  HLAMX(I)  -  HLAM(I)  +  (HLAS(I)/60) 

260  HLA(I)  -  HLAD(I)  +  (HLAMX(l)/60) 

270  HLOMX(I)  -  HLOM(I)  +  (HLOS(I)/60) 

280  HLO(I)  -  HLOD(I)  +  (HLOMX(I)/60) 

290  NSDIFF(I)  -  HLA(I)  -  IPLA 
300  EWDIFF(I)  -  IPLO  -  HLO(I) 

310  NSYDS(I)“NSDIFF(I)*2020*60 

320  EWYDS(I)  -  EWDIFF(I)  *  2020  "  60  *  COS(IPUDR) 

325  IF  ((TRK>85)AND(TRK<95))OR{(TRK>265)AND(TRK<275))THEN  340 
330  TOTYDS(I)  -  (NSYDS(l))/(COS(TRKR)) 

335  GOTO  350 

340  TOTYDS(I)  -  (EWYDS(I))/(SIN(TRKR)) 

350  YTD(I)  -  TOTYDS(I)  -  TRAJ 

360  TTD(I)  -  ((((YTD(i)/2020)/SPD)*  60)*  60) 

370  NEXT  I 

371  GOTO  820 

372  PRINT  "NE,  SW  AND  SE  HEMISPHERE  PROBLEMS  ARE  NOT  IMPLEMENTED 
AT  THIS  TIME." 

374  cls:GOTO  1070 
820  CLS 

830  LOCATE  2,2:PRiNT  "IP" 

831  LOCATE  2,17:PRINT  "Track" 

832  LOCATE  2,25: PRINT  "Speed" 

833  LOCATE  2,33:  PHI  NT  "Yards  to  drop" 

834  LOCATE  2,49: PRINT  "Time  to  drop" 

840  LOCATE  4,2:PRINT  LAH$ 

841  LOCATE  4,4:PRINT  IPLAD 

842  LOCATE  4,7:PRINT  IPLAM 

843  LOCATE  4,10:PRINT  IPLAS 

844  LOCATE4,17:PRINTTRK 

845  LOCATE  4,25: PRINT  SPD 

846  locate  5,2:print  LOH$ 

847  locate  5,4:print  IPLOD 

848  locate  5,8:print  IPLOM 

849  locate  5,11:print  IPLOS 

850  FOR  K  -  1  to  N 
860  L  -  3  +  K 

870  LOCATE  L,33:PRINTYTD(K) 

872  LOCATEL,49:PRINTTTD(K) 

880  NEXT  K 
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890  LOCATE  18,10;PR1NT  Tress  any  key  to  continue." 

900  B$»lNKEY$:lF  THEN  900 
910  CHAIN  "MFPLAN" 

1065  cisilocate  10,10:print  "Security  Violation,  Access  Denied." 

1066  locate  1 1 ,1 0:print  "press  any  key  to  continue." 

1067  z$»inkey$:if  z$=""  then  1067 
1070  els:  END 


1  'MINEPRNT.BAS  -  print  module  for  minefield  planning  program. 

3  OPTION  BASE  1 
4DIM  YTD(10),TTD(10) 

5 COMMON 

BATONS, NA$,LAH$,IPLAD,IPLAM,IPLAS,LOH$,IPLOD.IPLOM.IPLOS,SPD,TRK,N,YT 

DO.TTDO 

20CLS 

30  IF  BATON$-"VALID"  GOTO  40  ELSE  GOTO  250 
40LPR1NT  "";LPR!NT"" 

45  LPRINT  „"UNCLASSIFIED":LPRINT " " 

50  LPRINT  ,"  Minefield  Planning  Report" 

60  LPRINT  .."for  "NA$ 

65  LPRINT " " 

70  LPRINT  "initial  Position;" 

80  LPRINT  LAH$  " "  IPUD  IPLAM  IPLAS  "  "  LOH$  " "  IPLOD  IPLOM 
IPLOS 

90  LPRINT " " 

100  LPRINT  "True  Track: "  TRK  "  "  "Aircraft  Groundspeed; "  SPD 
110  LPRINT"" 

115  LPRINT  "Hole  ff","Time  to  Drop  "."Distance  to  Drop:" 

117  LPRINT  ."(seconds)"."(yards)" 

120  FOR  K  -  1  TO  N 

130  LPRINT  K,TrD(K),YTD(K) 

140  NEXT 
142  LPRINT " " 

145  LPRINT  .."UNCLASSIFIED" 

150  CHAIN  "MFPLAN" 

250  CLS;LOCATE  10.10:PR1NT  "Security  Violation,  Access  Denied." 

260  LOCATE  11.10;PRINT  "press  any  key  to  continue" 

270  q$»inkey$;if  q$“""  then  270 
280  cls:end 


1  'MINESAVE.BAS 

3  OPTION  BASE  1 

4  DiM  YTD(10),TTD(10) 

5 COM MON 

BATONS, NA$.LAH$.iPLAD.IPLAM,IPUkS.LOH$.lPLOD, IPLOM. IPLOS, SPD.TRK,N,YT 
DO.TTDO 

20  IF  BATON$-"VALID"  THEN  GOTO  40  ELSE  GOTO  140 

21  CLS 

22  LOCATE  2,2. PRINT  "When  this  progiam  stores  a  file  it  does  not  store  the" 

23  bcate  3,2.print  "trajectory  or  the  hole  lat/long.  Therefore  no  classified" 
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24  locate  4,2;print  "data  is  stored  or  can  be  derived  from  the  file  as  long  as" 

25  locate  5,2;print  "the  minefield  is  an  exercise  field  and  not  a  real  operational  one." 

26  LOCATE  7,5:PR1NT  "Do  you  wish  to  store  this  data  in  the  file?  (y  or  n) " 

27  INPUT  AN$ 

28  IF  AN$-'’Y"  OR  AN$-"y"  GOTO  40  ELSE  IF  AN$-"N"  OR  AN$-"n"  GOT0 130  ELSE 
GOTO  31 

31  LOCATE  10,5: PRINT  "Error  choose  y  or  n." 

32  LOCATE  12,5:PRINT  "Press  any  key  to  continue." 

33  B$-1NKEY$:IF  B$-""  THEN  33 

34  GOTO  21 

40  LOCATE  5,5:PRINT  "What  name  would  you  like  to  store  the  data  under?" 

45  locate  6,8:print  "(all  lower  case  and  remember  it  please)" 

50  INPUT  NA$ 

60  SHELL  "RCRYPT  $ED.MNQ  MINE.DAT 
70  OPEN  "MINE.DAr  FOR  APPEND  AS  #2 

80WRITE#2,NA$,LAH$,IPLAD,IPLAM,IPLAS,LOH$,IPLOD,IPLOM,IPLOS,SPD,TRK,N 

81  FOR  B»1  TO  N 

82  WRITE  #2.YTD(B),TrD(B) 

83  NEXT  B 
90  CLOSE  #2 

100  SHELL  "RCRYPT  MINE.DAT  SED.MNQ" 

110  KILL  "MINE.DAT" 

130  CHAIN  "MFPLAN" 

140  CLS:LOCATE  10,10:PRINT  "Security  Violation,  access  denied." 

150  LOCATE  11 ,10:PR1NT  "Press  any  key  to  continue." 

160  p$-inkey$;if  p$«""  then  160 
170CLS:END 


1  'MLRETREV.BAS 
3  OPTION  BASE  1 
4DIM  YTD(10).TTD(10) 

5 COMMON 

BATONS, NA$,LAH$,IPLAD,IPLAM,IPLAS.LOH$,IPLOD,IPLOM,IPLOS,SPD,TRK,N,YT 

do.ttdq 

20CLS 

30  IF  BATONS^ "VALID"  THEN  GOTO  40  ELSE  GOTO  160 

40  LOCATE  5,5; PRINT  "Enter  the  name  you  stored  desired  data  under,  (lower  case 

please)" 

50  INPUT  NM$ 

60  SHELL  "RCRYPT  SED.MNQ  MINE.DAT" 

70  OPEN  "MINE.DAT"  FOR  INPUT  AS  #3 

80  IF  EOF(3)  THEN  CLOSE  #3:PRiNT  "  NOT  FOUND";KILL  "MINE.DAT":GOTO  150 
90  INPUT  #3.NA$ 

110  IF  NA$«=NM$  THEN  GOTO  120  ELSE  GOTO  80 

120  INPUT  #3,LAH$,IPLAD.IPLAM,IPLAS,LOHS,IPLOD,IPLOM,IPLOS,SPD,TRK,N 

121  FOR  0=1  TON 

122  INPUT^3,YTD(C).TTD(C) 

123  NEXTC 

130  CLOSE  #3:K!LL  "MINE.DAT" 

150  CHAIN  "MFPLAN" 

160  CLS; LOCATE  10,10  PRINT  "Security  Violation,  access  denied." 
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170  LCXDATE  11,10;PRINT  "Press  any  key  to  continue." 
180  s$«inkey$:if  s$=""  then  180 
190  clsiend 


53 


Appendix  B: 

Source  code  for  Dive  Log  Application  in  Dbase  IV 


*  Program . :  DLUSER.PRG 

*  Author . :  This  is  an  APPLICATION  OBJECT. 

*Date . :  8^-91 

*  Notice . :  Type  information  here  or  greetings  to  your  users. 

*  dBASE  Ver....:  See  Application  menu  to  use  as  sign-on  baimer. 

*  Generated  by.:  APGEN  version  1.3 

*  Description..:  user  application  of  dive  log  database. 

*  Description..:  Main  routine  for  menu  sj'slem 

★♦A*-********************-******-****-************************************ 


*  ADDED  CODE  FOR  SECURITY  MODULE 
@3,3  SAY  "Enter  Password; " 

SET  COLOR  OF  NORMAL  TO  B/B 

ACCEPT"  "TOPWORD 

SET  COLOR  OF  NORMAL  TO  W+/B 

IF  (.NOT.  PWORD-"TiaRIS").AND.(.NOT.  PWORD="SCUD").AND.(.NOT. 
PWORD-'’BAGDAD") 

DO  VIOLATIO 
ELSE 

RUN  pkunzip  adldata  -.sIRAQ 


*-  Setup  envimnmeni 
SET  CONSOLE  OFF 
IFTYPE("gn_ApGcn'>'U' 

CLEAR  WINDOWS 
CLEAR  ALL 
CLOSE  ALL 
CLOSE  PROCEDURE 

gn  ApOcn-l 

ELSE 

gn_ApGen=gn_ApGen+ 1 
IF  gn_ApQen  >  4 

Du  Pause  WITH  "Maximum  level  of  Application  nesting  exceeded." 
RETURN 
ENT)IF 

PRIVATE  gn_oldsi7X‘ 
gn_oldsize=gn_scrsize 

PRIVATE  gc_bell,  gc_carry,  gc_clock,  gc_century,  gc_confirm,  gc_deli,; 
gc_safety,  gc_status,  gc_score,  gc.talk,  gc_kcy,  gc_prognum,; 
gc_quit,  gc_color,  gc  display,  gl_color,  gl_bateh,  gn_sersize 
ENDIF 

*—  StoR'  some  sets  to  variables 
gc_bell  =SET("BELL") 
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gt.ca’-ry  =SETCCARRV‘-) 
gc_cioci  =SET(  ■Clock*  :• 
gcjolor  =SET('ATTR!Sy^E’; 
gc_c8ntury=SET! "CENTURY") 
gc_co!!firt=SET!'CONF!RN'l 
gtjursor  =SETCCL'RSOR") 
gcjeli  =SET("DELI«ITERS") 
gc_dis?Uy=SET!'DISPLAYM 
gcjafety  =SET(’ SAFETY*) 
gcjtatus  =SET(  "STATUS") 
gcjcore  =SET(*SE0REP0ARD") 
gc  talk  =SET(*TALK‘) 

SET  CONSOLE  ON 
IF  gcjisplay  0  ’EBAOE" 

gn_error®0 

on’error  ’? 

SET  DIS'^LAY  TO  ESA25 

OK  ERROR 
ENBIF 

SET  BELL  ON 
SET  CARRY  OFF 
SET  CENTURY  OFF 
SET  CLOCK  OFF 
SET  CONFIRN  OFF 
SET  DELIMITERS  TO  “ 

SET  DELIMITERS  OFF 
SET  DEVICE  TO  SCREEN 
SET  ESCAPE  ON 
■  SET  EICLUSIVE  OFF 
SET  LOCK  ON 
SET  MESSAGE  TC  “* 

SET  PRINT  OFF 
SET  REPROCESS  ’0  4 
SE^  SAFETY  ON 
SET  TALK  OFF 


I"  Initialna  qlssa 

gl_batch=.F. 

gI_colcr=  ISCCLOR!) 

gn_error=0 

gr_ikey=0 

gn_Ecrsi:s-21 

gn_5end=C 

gn_trace=! 

gc_brdr=‘r 

gc_de¥='CON' 

gc_key=‘N' 

gc_prcgnus='  ' 

gc_quit='  ' 


vanabics 

is  IS  a  Dotcb  operation  ir  progress 
Ml.  SETCDISPJY*)  0  'CG^'MONO* 

Al  0  if  r.o  B'■ro^  otherwise  an  error  occurred 
U  keypress  '•eturned  froi  the  INkEY{)  function 
ti  nuiber  of  lires  or.  screen 
ii  return  value  frcs  popup  of  position  lenus 

sets  tf'ace  level,  however  you  need  to  change  teiplate 
i!r  border  to  use  when  drawing  bores 
ii  Device  to  use  fc'’  printing  -  See  Pro:.  PrintSet 
44  leave  the  application 

44  internal  progras  counter  to  handle  nested  renus 
44  eeivar  for  return  tc  caller 
44  Pick  List  value 
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I--  resove  aste»-isk  tc  turr.  cl::V  cr 
»  SET  CLOCK  TO 

I--  Blank  the  screen 
SET  COLOR  TO 
CLEAR 

SET  SCOREBOARD  OFF 
SET  STATUS  OFF 

I—  Define  tenus 
ummmmutmt 
DO  NPDEF  UITH  ’BDOD'  H  execute  deny  Process  DE-ir, 
ittuittiutttutit 
I-*  Execute  rain  le-'u 
DO  «H!LE  gcjey  =  'N' 

ititttnttttttnuu 

DO  USERBAR  WITH  *BCO“,*SOOD’' 

tltlttuttttttutttu 

IF  gc_quit  =  'Q' 

ekIt 

ENDIF 

ACTIVATE  «1NC0«  Exit_App 
Ic_ccp<=SET{ 'confirm') 

Ic  deh*SET("DELIMITER') 
set"  CONFIRM  OFF 
S£"  DELIMITER  OFF 

B  1,2  SAY  'Do  yuu  want  to  leave  this  arohcaticr’'  j 
SET  gc  key  PICT  VALID  c:  lev  t  'NY* 

READ 

SET  CONFIRM  ilt.conf. 

SET  DELIMITER  tlcjeli. 

RELEASE  lcjon<,  Icjel; 

DEACTIVATE'kfINDCk  E:Iit_Acp 
ENDD3 


I"  Reset  enviro''*ent 
DEACTIVATE  NINDOW  FullScr 
??  Color(gc_coIor) 
gn_Ap6en=gn_AcSer.-l 
SET  BELL  »gc_bell. 

SET  CARRY  igcjarry. 

SET  CLOCK  igcjlock. 

SET  CENTURY  igc_century. 

SET  CONFIRM  igc'confiri. 

SET  CURSOR  igc.cursar. 

SET  DELIMITERS  igcjeli. 

SET  DISPLAY  TO  igcjisplay. 
SET  STATUS  igc_stat'js. 

SET  SAFETY  4gc  jafety. 

SET  SCORE  tgc_score. 

SET  TALK  IgcJaU. 


ition 
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IF  gnjpqen  <  1 
Dk'kEY  label  FI 
CLEAR  NINSGiiS 
CLEAR  ALL 
CLOSE  ALL 
CLOSE  PROCEDURE 
SET  ESCAPE  0^ 

SET  RESSASE  TO  ■’ 

CLEAR 

ELSE 

DEFINE  NINDON  FulIEc-  FRDN  O.C  TO  qr.s’dsue-S,??  KUNE 
DEFINE  NINDON  Savescr  FRON  0,0  TO  gp  oldsize,??  ‘.ONE 
DEFINE  NINDON  He’psdr  «GN  0,0  TO  gp_cld5i:E,??  NONE 
ACTIVATE  NINDON  FuIlScr 
END  IF 

tttnttitttttttiit 

ENDIF 

uttuttittituut 


RETURN 


tmtmumtumummtmmmumttuumummumuummm 

It 

t  Descuptioi..!  Prdceddre  t;!e5  for  genersted  lePd  systsa. 

I  The  prograes  that  folldit  are  coea:”  td  .aar  routines 
t  The  lest  prooedure  is  the  Reru  Prcoess  DEFintiop 

ttitMtuttmtuttnttttttttttutttnttttntttttttittTtuttttMtittnttuttt 

tt 

PROCEDURE  LocLit 
’  PARANETER  I  type 
IF  NETNCRKO 
gn_error=0 
On'eRRCR  do  Rulte'p 
If  Itype  =  ‘I’ 
njo:t=FL0[!;() 

ENDIF 

IF  Itype  =  '2' 
llJochRLOCK!) 

EKDIF 
ON  ERROR 
ENDIF 
RETURN 


PROCEDURE  IMoJox 
PARAKE'ERS  k_say 
?  kjay 

REPLICATE! •-•jLEN'kjav)) 

7 

RETURN 

t  EOF:  kfc  Box 
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PROCEDURE  getjele 

I—  Bet  the  user  selection  4  sto'e  BAR  irt:  variable 
gnjend  =  BAR{)  44  Variable  for  print  testing 
DEACTIVATE  POPUP 
RETURN 

PROCEDURE  ShoHPick 
li5tval=PR0HPT() 

IF  LEFT(entryflg.l)="B'' 
lcJile=POPUP(! 

DO  41c_file.  NITH  ’A’ 

RETURN 

ENDIF 

IF  TYP£Ck_nindot(’)='U‘ 

ACTIVATE  HINDOli  ShonPick 
ELSE 

ACTIVATE  HINDOH  41c  NindCN. 

ENDIF 

STORE  0  TO  ln_iltey,)!l,x2 
ln_ikey=LAST<EV!; 

IF  ln_ikey=17 

xkAT(TPlK!listval)*'.',lc  tldlst! 

IF  xl  *  0 

Ic  fldlst'lc  f!dlst*TRk(li5tva!l*',' 

ELSE  ' 

x2sAT(',\SU3STR!l:_fldlst,xl)) 
lc.fldlst=S"UFF;ic  fldist,y,l,x2,") 

ENDIF 

CLEAR 

’  Ic  fldlst 
ENDIF 

ACTIVATE  SCREEN 
RETURN 

t  EGPi  ShowPick 
PROCEDURE  Cleanuc 

I--  test  Khetfier  repc-t  optic-,  xas  selected 
DO  CASE 

CASE  gc_dev='C0N' 

?  ’  Press  any  key  to  co'-tinue..." 
xx=lN!(EY(C) 

CASE  gc_dev='PRN’ 

SET  PRINT  OFF 
SET  PRINTER  TO 
CASE  gc_dev='TYT' 

CLOSE  ALTERNATE 
ENDCASE 
gc_dev='CON' 

RETURN 

t  EOP;  Cleanup 
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PROCEDURE  Pause 
PARAMETER  lc_iSQ 

I--  Paraaeters  ;  Icjsc  =  lessage  line 
IF  TYPE('lc_te5saQe'}='^U' 
gr_error=ERROR{) 

erdif” 

lc_tsg  =  lc_iS5 
lc_optjor.='C' 

ACTIVATE  HINDOti  Pause 
IF  gnjerror  >  0 
IF~TYPE!'lc_*essage’)=“L'' 

R  C,1  SAY  [An  error  has  occu're:  "  -  E'ro’’  lessage:  l+tlESSASE;) 
ELSE 

*  0,1  SAY  lErrcr  I  l+kjessags 
ERDIF 
ENDIF 

§  1,1  SAY  lc_*sg 

HAIT  ’  Press  any  key  to  continue../ 

DEACTIVATE  HINDOli  Pause 
RETURN 

t  EOP;  Pause 


PROCEDURE  Muite'r 

I—  set  the  global  erro*-  variable 

gn_error=ERRCR() 

I”  contains  error  nuebs'’  to  test 
lc_ernc*STR!£RR0R(),31t',' 

I--  onticn  var. 
lc_opt=‘T' 

I--  Dialog  box  ♦or  optiors  Try  again  ano  Return  to  tenu. 

IF  Ic.ernc  I  ’108, 10?. 125, 129," 

ACTIVATE  KINDOli  Pause 
i  0,2  SAv  lc_e-no**  •+PE33A5E:j 

§  2,22  3AV  ''T  =  Try  again,  R  =  Retu’-n  to  re.nu.‘  BET  lc_opt  ; 
PICTURE  •!•  VALID  lc_oct  $  ’"P'- 
READ 

DEACTIVATE  kllNDLM  Pause 
IF  Ic.opt  =  ‘R" 

RETURN 

ENDIF 

ENDIF 

t"  Display  tessage  and  return  to  *enu. 

IF  .NOT.  Icjrno  i  *108, 10?, 128, 12?, ■ 

DO  PAUSE  NlTh  ERROR! ) 

RETURN 

ENDIF 

I—  reset  global  variable 
gn_error=0 

t”  Try  the  coitand  again 

RETRY 

RETURN 
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»  EDP:  Kulterr 


PROCEDUSE  Trace 

t  Desc;  Trace  procedure  -  to  let  erccraare'’  Vron  tthst  eoaule 
t  IS  about  to  execute  and  Mbat  codule  has  executes. 

PARAMETERS  p.isg,  pjvl 

t--  Paraaeters  ;  pjsg  =  aessage  line,  pj”!  =  trace  level 
Icjisg  =  p_8sg 
Injvl  =  pjvl 
Icjrp  =  '  ’ 

IF  gnJracB  <,  InJvl 
RETURN 
ENDIF 

DEFINE  NINDQW  trace  FROM  5,0  IG  16,7'  DDuRlE 
ACTIVATE  NINDSN  trace 
DO  NHILE  Icjrp  <'  'Q' 

CLEAR 

«  2.40-LEN;!cjEg)/:  SAY  Icjsg 

*  4,05  SAY  'S  -  set  trace  level,  D  -  Display  status,  M  -  display  Neco'y' 
R  5,05  SAY  'P  •  Turn  p’-ir.tsr  on,  3  -  to  Quit' 

Ic  trp  =  'Q' 

§  5,38  BET  lc_trp  PICTURE 

READ 

DC  CASE 

CASE  Ic.trp  *  'S' 

«  2,01  CcEAR 

I  2,33  SAY  'Set  trace  level' 

A  4,05  SAY  'Ente--  trace  level  to  charge  to:'  SET  gnjrace  PICTURE  'I' 
i  5,05  SAY  ■ 

READ 

IF  gn_traces3 
A  2,01  CLEAR 

A  3,05  SA'^  'Trace  :s  now  turned  oM,.To  reactivate  Trace-  -  'ress  [ 
A  4,05  say  'P^ess  any  key  to  continue...' 

NAiT  " 

ON  lEY  LAPEL  F3  ar  trace  ■  1 
ENDl' 

CASE  Icjrp  =  'D' 

DISPLAY  STATUS 
NAIT 

CASE  Icjrp  =  ■«' 

DISPLAY  MEMORY 
NAIT 

CASE  Icjrp  =  'P' 

SET  PRINT  ON 
ENDCASE 
ENDDO 

SET  PRINT  OFF 
RELEASE  NINDON  trace 
A  24,79  SAY  *  ■ 

RETURN 
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I  EOF;  Tr»ce 


PROCEDURE  PrintSet 

I--  Initialize  variables 

9c_dev=‘CDN‘ 

lc_chBxce='  ' 

gnj)key=0 

gn_s8nd=3 

DEFINE  NINDDN  printer,  FROM  OS, 2?  TC  17, 

DEFINE  POPUP  SavePrin  FROK  10,40 

DEFINE  BAR  1  OF  SavePrir  PROFIT  ■  Send  output  to  ...*  Stlf 

DEFINE  BAR  2  OF  SavePrir.  PROH”  R£PJCATE(CHR:194),24)  SF!? 

DEFINE  BAR  3  OF  SavePrir  PRONPT  *  CCN:  Console’  NES5AEE  'Send  output  to  Scree'' 
DEFINE  BAR  4  OF  SavePrir  PRflK»T  "  LPTl:  Parallel  port  1  ’  HESSAOE  ‘Send  output 
LPTl:’ 

DEFINE  BAR  5  OF  SaveFrin  PRONFT  ‘  LPT2:  Parallel  port  2‘  NESEABE  ‘Send  output  t 
LPT2:’ 

DEFINE  BAR  b  OF  SaveFrin  PROKFT  ’  Ivf.li  Serial  port  1’  KESSAEE  'Send  output  to 
CORl:’ 

DEFINE  BAR  7  3F  Save'rir  PRONPT  *  FILE  *  REPORT. TH’  HESSASE  ’Seno  output  to 
File  Report.txt’ 

ON  SELECTION  POPUP  EavePrin  DO  gst.sele 

ACTIVATE  POPUP  SavePr;-' 

RELEASE  POPUP  SavePrir 

.  gnjkeysLAST^EVO 
IF  gn_send  *  7 
5C_dev  =  'TIT'' 

SET  A.TERNATE  TO  REPORT. TIt 
SET  ALTERNATE  ON 
ELSE 

IF  .NOT.  (gn_send  =  3  .OR,  LAETIE'!!  =  27; 
g:_dev  =  'PRN' 

tesp  =  SUBETRC  LPTlLPTOCuPl  ‘,i!pn_se-.3-2!-l)l4.4: 

ON  ERROR  DO  prrtrtry 
SET  PRINTER  TO  itetp. 

IF  gnjjkey  O  27 
SET  PRINT  ON 
ENDIF 
ON  ERROR 
ENDIF 
ENDIF 

RELEASE  NINDON  printe,tp 
RETURN 

PROCEDURE  prntrtry 
PRIVATE  Icjscape 
Icjscape  =  SETCESCAPE’! 
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IF  .NOT.  PRINTSTATUS'! 

IF  kjscaps  =  'ON' 

SET  ESCAPE  OFF 
ENDIF 

gn  jitey  =  0 

ACTIVATE  NlNDOti  pnntesp 
*  1,0  SAY  'Please  ready  your  prrter  cr' 

I  2,0  SAY  •  press  ESC  to  cancel' 

DO  NHILE  (  .t;CT.  PRINTSTATUSO)  .AND.  grjley  27 
gnjkf,  =  INNEYO 
ENDDO 

DEACTIVATE  NINDON  prirteep 
SET  ESCAPE  Ik.Bscape. 

IF  gr  jikey  0  27 
RETRY 
EHDIF 
EtiDlF 
RETURN 

t  ECP!  PrirtSet 

PROCEDURE  Position 
IF  LENIDSFO)  *  0 

DO  Pauss  NITh  ‘DataPass  rot  in  use.  ' 

RETURN 

ENDIF 

SET  SPACE  ON 
SET  DELIMITERS  O'^F 

•  lnjype*0  suP!e/el  selection 

InjkeysREADKEYO  41  test  kr  ESC  or  Retinr. 

InjecsRECNCI)  11  DE^  record  rusber 
In_nui=C  11  tor  inc.t  o^  a  njoter 

IdJate'OATE!)  11  fcr  inp:t  of  a  date 

k_opticn='0'  11  »a:n  cpticr  le.  See*,  Goto  and  Lccate 
t--  Scope  le.  AL.,  REST,  NEt"  <n) 

STORE  space;  10)  TO  kjcp 

t"  1  =  Character  SEE!',  2  =  For  clause,  3  =  Nr.ile  clause 
STORE  Si^ACEdO)  TC  k.lrl,  kjr2,  kjr.3 
k_teip=" 

«  0,00  SAY  'Index  order:  •+r.F("*CRDEFi(:, 'Database  is  in  natural  order',DRlEP.|)! 
*  1,00  SAY  'Listed  bek*  are  the  first  16  fields.' 
k_tetp=REPLlCATE(CHR;i96),lV) 

I  2,0  SAY  :HR(218)+k.te8p*CHR;i94:+k_tee?+CHR(m)rk_te:?rCHR;i?l)tk_teip 
ln_nue=240 

Do'nhILE  ln_nui  <  560 

k_tesp-FIELD(  (k_r.ui-24C;/iO  +1} 

«  (’ln_nui/80),KCD;In_nui,e0)  SAY  CHR'179)+; 
k_teip+SPACE(ll-LEN(k_te*p!)t; 

SUESTR;'=  Char  =  Date  =  Logic  =  Nu«  =  Float  =  Neao  ',; 

AT(TYPE(k_tetp),'CDLNFH'J')f8-7,8) 
ln_nui=ln_nui*20 

endog" 
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In  nuc=l 


DEFINE  POPUP  Positl  FR0«  6,30 

DEFINE  BAR  1  OF  Positl  FROKFT  *  Position  by  ’  SKIP 

DEFINE  BAR  2  OF  Positl  PROMPT  REPLICATE (CHRI 196), 15)  SKIP 

DEFINE  BAR  3  OF  Positl  PROHPT  *  SEEK  Record"  MESSAGE  "Search  or.  inder  ley"  SKI? 

FOR  ••=0RDERl) 

DEFINE  BAR  4  OF  Positl  PROMPT  "  GOTO  Record"  MESSAGE  "Position  to  specific  record* 

DEFINE  BAR  5  OF  Positl  PROHPT  "  LOCATE  Reccd  "  MESSAGE  "Locate  record  fcr 

condition" 

DEFINE  BAR  b  OF  Positl  PROHPT  '  Returr'  HEESASE  "Return  Nithoct  pcsitioning'- 
ON  SELECTION  POPUP  Positl  BO  getjele 


SET  CONFIRM  ON 
DO  NHILE  lc_option=‘0' 

ACTIVATE  POPUP  Pcsitl 

lc_option  =  ltri»!str(gn_send))  ii  for  popup 
IF  LASTKEYO  =  27  .OR.  Ic_option='6* 

GOTO  ln_rec 
EXIT 
END  IF 
DO  CASE 

CASE  ic_option='3' 

I"  Seek 

IF  LEN!ND1(1|)*0  .AND.  LEN;Hr<!l))-0 

00  Pause  NIT-  "Can't  use  this  opticr.  -  No  rder  files  are  open.' 

LOOP 

ENDIF 

In_type=l 

lcjnl*SPACE(40! 

DEFINE  KINDDN  Posit2  FRCH  B,19  15,62  DC-ELE 

ACTIVATE  WINDOL-  PcsitC 

«  1,1  SAY  'Enter  tbs  type  expression:'  GET  lr..tYP5  '^ICT  *»“  RANGE  1.3 
R  2,1  SAY  ‘(l=:hara:tsr,  2=n:*e'’-c  a'd  T^dats.)' 

SET  CURSOR  ON 

rea: 

SET  CURSCR  [fP 

IF  .NCF.  (REAEKEVO  =  12  .OR.  READkEYi)  =  I'Sei 
SET  CONFIRM  ON 

i  3,1  SAY  "Enter  the  key  expression  to  search  for:" 

IF  ln_type=3 

B  4.1  BET  Idjate  PICT  "BD" 

ELSE 

IF  ln_type=2 

B  4,1  SET  ln_nu«  PICT  'tittttttft' 

ELSE 

B  4,1  GET  Ic.Inl 
ENDIF 


ENDIF 

SET  CURSOR  ON 
READ 

SET  CURSOR  OFF 
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SET  CONnR*;  OFF 

IF  .NOT.  (RERBKEYO  =  12  .CR.  REsIjlEV;)  =  218) 

kj6it?=llF!i'i_tyce=l.'TR!Hi;cJnl)',IIF;i<!_tyDE=:/h_njs*,'ld_d5:e’ 
SEEK  ilc_tsip. 

ENDIF 


ENDIF 

RELEASE  HINBDiiS  FositE 
CASE  lc_option='4' 

I—  Soto 


ln_typs=l 

DEFINE  POPUP  Posit2  FfiOK  B,2C 

DEFINE  BAR  1  0^  Pcsit:  PRORPT  ■  SOTO:’  SKIP 

DEFINE  BAR  2  OF  pBsit2  PROMPT  REP11CATE(CHR1196) ,10  SKIP 

DEFINE  BAR  3  OF  Po5it2  PROMPT  ’  TO'**  MESSAGE  ’SOTO  Top  of  File' 

DEFINE  BAR  4  OF  PositO  PROMPT  ’  BOTTOM*  MESSAGE  ’SOTO  Bolton  of  File" 

DEFINE  BAR  5  OF  Posit2  PROMPT  ’  Record  I  ’  MESSAGE  *6010  A  Specific  Record' 

ON  SELECTION  POPUP  Posit2  DO  getjele 
ACTIVATE  POPUP  positO 
Injype  =  gnjend 
If'lASTKEYo'o  27 
IF  In  typers 

DEF~1NE  NINDON  Posit:  FROM  B,26  TO  13, JO  DQUILE 
ACTIVATE  NINDON  Po5it2 
b  nu»*C 

B  3,1  SAY  'Max.  Record  I  =  ”+LTR1M!STR(RECCQ'JNT')1) 

B  1,1  SAY  'Record  to  GOTO'  BET  lr,_n-s  PICT  'mm'  RANGE  l.RECCOdNT;) 

SET  CURSOR  ON 

READ 

SET  CURSOR  OFF 

IF  .NOT.  (READKEVO  =  12  .OR.  READKEYO  *  26B) 

ECO  ln_nus 
ENtlF 

RELEASE  NlSDOii'S  Posit: 

ELSE 


lc.tB»?=!lF'l'.Jype=3, 'TOP*. 'BOTTOM") 
ECTC  41c  tesp. 

ENIIF 

ENDIF 


CASE  lc_optir,n='5' 
t--  Locate 

DEFINE  DINDOW  Posit:  FROM  B.lfc  TO  14,66  DOUBLE 
ACTIVATE  NINOOil  Posit2 
I  1,19  SAY  'ie.  ALL,  NETT  <n>,  and  REST' 

«  1,01  SAY  ’Scope:"  BET  Icjcp 
«  2,01  SAY  ’For:  '  BET  lcjn2 
«  3,01  SAY  ’Nhile:’  GET  lc_!n3 
SET  CURSOR  ON 
READ 

SET  CURSOR  OFF 

IF  .NOT.  (READKEYO  =  12  .OR.  READKEYO  =  26B) 
lc_teip=TRIMOc_scp) 

IcJenpOcJeip  ♦  l!F(LEN(TRIM(lcJn:))  )  0,’  FOR  ’+TRIM(lc_ln2),") 
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lc_t6tD=l:_tEis  *  !!F(:EK(TRI*1!lc_ir.3)/ 
lF”LESUc_teisp)  >  C 
LCCATE  vMcJsec. 

ELSE 


0,"  KHILE  ■4TRI!‘:(!c_k 


D3  Pause  WITH  'All  fields  «B'e  blanL.* 


ENDIF 

ENDIF 

RELEASE  WINTDA  PositE 
ENDCASE 
IF  EOF!) 

DO  Pause  WITH  'ReccriJ  net  four,i." 

GOTO  In  rec 
ENDF 

IF  READKEY')=i:  .OR.  REAILEY!)^  26S  .OR.  LAETt:EY!}=:7  44  Es:  k2e  hit 
Ic  ODtion=‘0' 

ekdf' 

ENDDC 

SET  CURSOR  Pjejursor. 

SET  DELIMITERS  4;:_del:. 

SET  CONFIRM  OFF 
RETURK 


t  EC'P:  Positio’' 


PROCEDURE  Se'A:t 

SAVE  SCREEN  TO  ProKScrEk.Apen. 

DEACTIVATE  WlNDOi.  Culis:- 

SET  SCOREEOARD  ON 

RETURN 

»  ESP:  BefAct 

PROCEDURE  Aft Act 
CLEAR 

SET  SCOREBOARD  OFF 

ACTIVATE  WINDC*  ►ullscr 

RESTORE  SCREEN  '^RCM  BroKSC-ilc.AcSer. 

RELEASE  SCREEN  BrjriscrEIcJjaen, 

RETURN 

t  EOF:  AftAct 


PROCEDURE  Pnstnhlc 
!njetkey=!Nt'EY;) 

DEFINE  WINDOW  Te*?help  FROM  3,12  TO  19.67 
ACTIVATE  WINDOW  Teiphelp 
DO  CASE 

CASE  ’SEER’  I  PROMPT') 

I--  HELP  SEEK 
'  SEEK  <exp>’ 

? 

?  '  Evaluates  a  specified  expression  and  attejpts  to" 

'>  •  find  its  value  in  the  faster  index  of  the  database" 
?  *  file.  Returns  a  logical  true  (.T.)  if  the  index" 
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?  “  key  is  found,  and  a  logical  faiss  !  J.)  if  il  is' 

?  *  not  found.’ 

7 

?•  Ex:  SEEK  C70D{ '11/03/27'}  -  converts  the" 

?  *  expression  frot  character  to  date  and" 

?  *  then  searches  for  the  value  in  the  index* 

7 

CftSE  LEFT(LTR1«(PR0MPT(;),4)  $  ’BDTD  TOP  EOT]  Peco" 

I--  HELP  BOTO 

■  BO/BOTO  BOTTOH/TOP  [IN  <alias>]’ 

?  ■  or’ 

?  •  BO/BOTO  [RECORD)  <record  nuiber>  [IN  <alias»’ 

?  •  or’ 

?  *  (record  nuiber)’ 

7 

?  ’  Positions  the  record  pointer  to  a  specified  record" 
?  ’  or  location  in  the  active  database  file." 

7 

7  •  TO^  foves  the  pointer  to  ths  first  record' 

?  ’  EOTTOH  eoves  the  pcinter  to  the  last  record" 

7 

?  •  Ex:  4  -  loves  the  reccd  pointer  to  record  4' 

7 

CftSE  ’LOCftTE’  !  PROhPT!) 
t-  HELP  LQCftlE 

?  '  LOCftTE  FOR  (condition)  [(scope)]' 

*  [HHILE  (condition)]" 

7 

?  ’  Searches  the  active  database  file,  seoue!-tially,’ 

'  for  the  first  record  that  leets  the  specified" 

’  criteria.  The  function  FCUNDl)  returns  true  !.T.)’ 
?  ’  If  LOCftTE  is  successful." 

?  ’  Ex:  LOCftTE  m.  Age  =  '25'  NEH  5’ 

"  searches  for  the  next  five  records' 

"  containing  25  in  the  ftge  field" 

n 

CASE  ’Return'  $  PROHFTO 

7 

?  ’  Return  to  action  in  progress,  »ith  or  without’ 

?  *  positioning  the  record  pointer." 

ENDCftSE 

Injetkey  =  INKEY(O) 

DEACTIVATE  HINDOH  Teephelp 
RELEASE  MINDQN  Teephelp 
RETURN 

I  EQP:  Postnhlp 
FUNCTION  Color 

I . 

t  Foriat: 
t  COLOR!  (expo  ) 
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I  <expC>  =  NDRHAl,  HiSKLlSHT,  HESSASES,  TITLES,  BQ‘,  INFORDA-IGN, 

FIELDS 

t  or  a  variable  nitb  all  colors  store  ir  it 
I  Ver;  dBASE  1.1 

t 

I  The  COLOR! }  function  either  returns  or  sets  colors  retu’-ned  with  the 
I  SET! 'attribute* I  setting 

I  If  <expC>  is  a  color  string  then  null  is  retur-ed  otherwise  the  color 
I  setting  is  returned  for  one  of  dBASE' s  color  options 

I 

t  See  Also:  SET!'attribute*; 

t 

I . 

PARAMETERS  set.color 

PRIVATE  color_nu«,  color_str,  cnt 

setjolor  =  l)PPER!set_color’, 

IF  setjolor  =  'COLOR' 

I-  Return  standaro,  enhancer,  border  colors  0''lv 
RETURN  SUESTR!SET!'attr'),l,  AT!'  4*.  SETr-atf'!)) 

ENDIF 

»-  Decla'e  array  to  parse  color  options  <ron  EET!'3ttr“; 

PRIVATE  color, 

TECLARE  colcrJB] 

I-  Detertine  if  user  is  resto'in;  colcrs  vs.  saving  colors 
IF  '  4'  $  setjolor 

•  color jtr  =  “,'+setjclo'*‘,’'  41  Restore  colc’  attributes 

ELSE 

cclorjtr  =  %'+SET!'AlTR]Bu''E';+\'  4!-  Save  color  attrib.tes 

ENDIF 

t"  Stuff  array  witn  individual  color  setting 
cclorjtr  =  STUFF(ccl:r Jtr,  A''!’  4”,  color jt--..  4, 
cnt  =  1 

DO  NHILE  cnt  '=  E 

colo'jtr  =  SlBSTRlcolor  Jtr,  AT!",',  color  jtr  )  +1  ) 
colorjcnt]  =  SUb£TR!co!o''jtr,  1,  AT!",*,  coicrjtr  )  -  1) 
cnt  =  cnt  ♦  1 
ENDDO 

IF  '  4'  $  setjolor 
I”  Set  color  back 

SET  COLOR  TO  ,,4colcrJ3].  14  Eo'der  color 

SET  COLOR  OF  NORMAL  TO  4color_[l]. 

SET  COLOR  OF  HlEHulSHT  TO  4ro!orJ2]. 

SET  COLOR  OF  ME3SAEE5  TO  4co!or_[41. 

SET  COLOR  OF  TITLES  TO  4colDrJ5]. 

SET  COLOR  OF  BCX  TO  4c3lorJ6]. 

SET  COLOR  OF  INFORMATION  TO  4color_!7]. 

SET  COLOR  OF  FIELDS  TO  icolorJE]. 

ELSE 
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I"  Return  color  string  reoceste:’ 

D3  CASE 

CASE  setjo’.or  t  'HORHA'J 
colcr_nus  =  1 
CASE  setjolor  $  "HIBHLISHT" 
color_nui  =  2 
CASE  setjolor  $  ‘BORDEF:’' 

color_iiut  =  3 
CASE  setjolor  $  'HESSASES' 
color_nui  =  4 
CASE  setjolor  i  ’TITLES' 
colorjur  =  5 
CASE  setjolor  I  ’EOr 
colorjue  =  6 

CASE  set’jclor  $  ’INFORNATION' 
colorjuf  =  7 
CASE  setjolor  f  ’-lELDS" 
colorjui  =  3 

endcase" 

ENDIF 

RETURN  I1F(“  R’  $  setjolor,  ”,  color Jcokr jut]) 


tttntttnutttttttiitttnttttmtiittttittuttttiitttttMttttttMMit 

I  Progrss . ;  f.FDEF 

I  Author . :  This  is  an  APPLICATION  OBJECT. 

I  Date . :  8-04-91 

t  Notice . :  Tyje  inforiation  here  or  greetings  to  your  users. 

t  DBASE  Ver,...;  See  Aoplicat.on  iienu  to  use  as  sign-on  banner, 

I  Benerated  by.!  AFSEN  version  1.3 
t  Desciption,.:  user  application  of  dive  log  database. 

t  Description..:  Defines  all  aerus  in  the  systes 

nuutttttttttuttttititiuntiutttttttttittttntiutiuttttutntit 

PROCEDURE  HPDEF 


tttnttttttittt 

PARARETER  BATON 
IF  .NOT.  BAT0N="S00D“ 
DO  VIOLATIO 
ELSE 

UttlttttttttU 


IF  gl  jolor 

SET  COLOR  OF  NORHA.  TO  N+/B 
SET  COLOR  OF  HESSASES  TO  li*/N 
SET  COLOR  OF  TITLES  TO  N/B 
SET  COLOR  OF  H16HLIBHT  TO  R6+/6B 
SET  COLOR  OF  BOl  TO  R6t/BB 
SET  COLOR  OF  INFORMATION  TO  B/H 
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SET  COLOR  OF  FIELDS  TO  N/GB 
E«DIF 
CLEAR 

t--  Sign-on  banner 
SET  BORDER  TO 

e  5,9  TO  16,69  DOUBLE  COLOR  RB+/BB 

i  7,10  SAY  •  I  I  >  KELCOKE  TO  AUTOMATED  DIVE  LDS  VERSION  1.1  t  I  f 
B  9,10  SAY  '  This  user  application  allows  Ter  entering  dives,  Tird-" 

6  10,10  SAY  ‘  ing  dive  logs  for  printing  or  brownng,  and  finding  and' 
t!  11,10  SAY  ’  printing  of  qualification  lists.  Security  of  inforta-' 

B  12,10  SAY  '  tier,  is  ensured  if  users  keep  their  diver  nusber  secure.* 
I  13,10  SAY  ’  You  lust  know  your  diver  nueber  to  accosplish  any  of  the' 
B  14,10  SAY  •  systeas  functions.  Thank  you  fc’-  using  ADL  1.1" 
t  6,10  FILL  TO  15,68  COLOR  W*/N 

§  24,30  SAV  ■  Press  ■+CHR117)+:HR(196)+CHR(217)+"  to  continue.  “ 
gn_ikey=lNk:EY(5CC) 

CLEAR 

I—  Prevents  clearing  of  eenus  fro*  coasands: 
t"  SET  STATUS  and  SET  SCCREBOARD 
DEFINE  WINDOW  FullScr  FRDN  0,0  TO  24,79  NOSE 
I—  Position  at  runtiae  and  batch  process 
DEFINE  WINDOW  Savescr  FROM  0,v  TO  21,79  NONE 
h-  FI  Help 

DEFINE  WINDOW  Helpscr  FROH  0,0  TO  21,79  NONE 
IF  gn_ApGensl 

I"  Are  you  sure’  lent  application) 

DEFINE  WINDOW  Eritjpp  FROH  11,17  TO  15,62  DOUBLE 
I--  Pause  wessage  box 

DEFINE  WINDOW  Fause  FROh  15.00  TO  19,79  DCuBlE 
END  IF 


ACTIVATE  WINDOW  FullScr 
«  24,00 

«  23,00  SAV  'Loading... " 

SET  BORDER  TO  DOUBLE 
t"  Bar 

DEFINE  HENU  USEREAR  MESSAGE  'Select  ar  option  with  the  arrow  keys  and  push 
ENTER.' 

DEFINE  PAD  FADJ  OF  USERBAR  PROMPT  'Dive'  AT  1,1 
ON  SELECTION  PAD  PAD_1  OF  USERBAR  DC  ACTOl 
DEFINE  PAD  ?AD_2  OF  USERBAR  PROMPT  'Log'  AT  1,10 
ON  SELECTION  PAD  PADJ  OF  USEREAR  DO  ACTOl 
DEFINE  PAD  PAD_3  OF  USERBAR  PROMPT  'Quals'  AT  1,1S 
ON  SELECTION  PAD  PADJ  OF  USERBAR  DO  ACTOl 
DEFINE  PAD  PAD_4  OF  USERBAR  PROMPT  'Exit'  A;  1,2B 
ON  SELECTION  PAD  PADJ  OF  USEREAR  DO  ACTOl 
??  *.* 

SET  BORDER  TO  DOUBLE 
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I—  Popup 

DEFINE  POPUP  DIVE  FRCK  2,1  TO  ; 

HESSABE  'Press  ENTER  tc  centinue/enter  a  dive  o’"  else  -->  (arrpu  key!' 

DEFINE  BAF.  1  OF  DIVE  PROK'  '  'Ente'  a  ri:vE‘ 

ON  SELECTION  POPUP  DIVE  DO  ACTCO 

??  *.’ 

SET  BORDER  TO  DOUBLE 
I"  Popup 

DEFINE  POPUP  LOB  FRDN  2,10  TD  6,29  ; 

NESSABE  'Choose  an  option  tcth  aToti  leys  ard  push  RETURN  or  else  use  (arrc*  key) 
DEFINE  BAP,  1  OF  LOB  PRCNPT  'Fin!!  a  log" 

DEFINE  BAR  2  OF  LOS  PRONPT  'Brouie  Found  log' 

DEFINE  BAR  3  OF  LOB  PROMPT  'Print  tour;  log' 

ttmttmu 

ON  SELECTION  POPUP  LDE  DO  ACT03  NITH  'BODD" 

ttttttttttttt 
??  '.' 

SET  BORDER  TO  DOUBLE 
t—  Popup 

DEFINE  POPUP  QU.AL  FROM  2, IS  TO  5,42  : 

NESSABE  'Use  arrou  keys  tc  select  an  option  and  press  RETURN  c  else  (arron  keys) 
DEFINE  BAR  1  OF  DUAL  PROMPT  'Fir!;  a  goal  list' 

DEFINE  BAR  2  OF  DUAL  PROMPT  “Print  Found  qua!  list" 

tttttltttttt 

ON  SELECTION  POPUP  DUAL  DO  ACT04  NITH  '500D“ 

tttttttttttt 
??  *,' 

SET  BORDER  TC  DOUBLE 
I"  Popup 

DEFINE  POPUP  EXIT  FROM  2,28  TC  4,4®  ; 

NESSABE  'Position!  ■+CHR!27)+CHR(26;*CHR(25)+CHR:24)*'  Sele::: 
■+CHR117)+CHRi!96)*ChR(217l*'  Help:  F!' 

DEFINE  BAR  1  OF  EIH  PROMPT  “Return  to  DBASE  IV" 

ON  SELECTION  POPUP  EIT  DC  ACTC5 

?7  «  • 

tttItUMtttttt 

ENDIF 

tttllttFttttttt 

RETURN 

I--  EQP:  MPDEF.PP.S 

PROCEDURE  IHELPl 
InJeyMNKEYO 
ON  KEY  LABEL  FI 

lcjopiBnu=lIF(  "  =  POPUP! ),  MENU',),  POPUP',!  ) 

ACTIVATE  NINDON  Heloscr 
SET  ESCAPE  OFF 
ACTIVATE  SCREEN 
§  0,0  CLEAR  TC  21,79 
e  1,0  TO  21,79  COLOR  R6+/6B 
e  24,00 
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S  24, 2e  Sfiy  'Press  ary  m  to  ccrtirue...'- 
«  0.0  SAY 
DG  CASE 

I”  help  for  senj  L'SEPBAP 
CASE  'USERBAP.'  =  Icjcpeeno 
§  2,2  SAY  'No  Help  defined,' 
t—  help  for  ceno  DIVE 
CASE  'DIVE'  =  Ic  joptenu 
«  2,2  SAY  'N:  Help  defined.' 

I”  help  for  tenu  LOB 
CASE  'LOS'  =  Ic jcpieni! 

8  2,2  SAY  'No  Help  defined.' 

I"  help  for  ienu  DUAL 
CASE  'QUAL'  =  Icjopsenii 
t  2,2  SAY  'No  Help  defined.' 

I"  help  for  lenu  EKiT 
CASE  'EYIT'  =  kjOBier.u 
6  2,2  SAV  'No  Help  defired.' 

DTHERHISE 

8  2,2  SAY  ■iJnk’'oiiir  lerj  nap.e,  heir  itas  never  defined.* 
ENDCASE 

ln_key=lN‘;EY(('! 

SET  ESCAPE  ON 
8  24,00 

DEACTIVATE  HINDCK  Helpsc^ 

ON  kEY  LABEL  FI  DC  IHELPl 
RETURN 

I--  EOF:  IHELPl 


ntiuutitttntttttuuniituutitntttMtMttutntttttitintinMi 


t  Prograa . :  USERBAR.PPB 

t  Author . ;  This  is  an  APPJLATION  OBJECT. 

t  Date . :  S-04-91 

t  Notice . :  Type  inforeaticr  here  or  greetings  to  your  use's. 

t  dfiASE  Ve*-....!  See  Apclicatior  *enu  to  use  as  sign-on  banner, 
t  Senerated  by.:  APBEN  version  1.3 
t  Description..:  FIRST  MENU  uEVEL  IN  USER  APPLICATION. 


t  Description. 


Hem  actions 


ttittutttttttutttuttttttntMitttnttttttttttttttttttttutntuuit 

PROCEDURE  USERBAR 
PARAHETERS  entryflg,  BATON 


PRIVATE  gc  jrognu* 

gcj)rognu«='Or 

SET  COLOR  OF  NQRHAL  TO  «t/B 

CLEAR 


PRIVATE  lc_Ap6en 
lc_ApEen=LfRIH(STR(gn_ApBen)) 
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DQ  SETCl 
IF  gnjrrcr  >  C 
9r._err3r=0 
RETURN 
ENDIF 

I--  Before  ler.u  code 


ACTIVATE  RENU  USERBAR 
t  0,0  CLEAR  TO  2,7? 

I”  After  sena 
RETURN 

f--  EOF  USERBAR 

PRCCEDURE  BETOl 

ON  KEY  LABEL  FI  DO  IHE  Jl 

DO  DBFOl  til  open  *ena  level  datapase 

IF  gn  error  =  0 

IF'gl  color  .AND.  .NOT.  SETI’AnRIBUTE')  =  ''N+/E,R6+/8B,N/N  '+ 
CHR(38)+CHR!381+’  l(t/N,H/B,RB+/GB,B/li,N/SB“ 

SET  COLOR  OF  NORFAL  TO  W+/B 
SET  COLOR  OF  RESSA5ES  TO  Kt/N 
SET  COLOR  OF  TITLES  TO  N/B 
SET  COLOR  OF  HlSriLISHT  TO  RB+/GP 
.  SET  COLOR  OF  BDI  TO  R3*/6B 
SET  COLOR  OF  INFORiTATlCN  TO  B/« 

SET  COLGF.  0?  FIELDS  TO  N/GB 
ENDIF 


SET  BORDER  TO 

8  0,0  TO  2,79  DCJBLE  COLOR  RSr/GB 
8  1,1  CLEAR  TO  1,75 
8  1,1  FILL  TO  1,76  COLOR  N+/N 
8  1,1  SAY  ’Dive’  COLOR  N+/N 
8  1,10  SAY  ’Log*  COLOR  N+/N 
8  1,18  SAY  ’Goals’  COLOR  N+/N 
8  1,28  SAY  ’Exit’  COLOR  N*/N 
ENDIF 
RETURN 

PROCEDURE  DBFOl 
CLOSE  DATABASES 

t"  Open  lena  level  viex/database 
lc_iessage=*0’ 

ON  ERROR  lc_ees£a9e=LTRlN(5TR{ERRDRl)))+’  ’+NESSAEE() 
USE  DIVE.DEF 


72 


ON  ERROR 

gn_Brror=VftL ( ] :_8B5S3gE } 

IF  gnjrror  >  0 
Co'pause  NITH  ; 

'Error  opening  CIVE.DSF'’ 
ltj)st(='Y' 

RETURN 

ENDIF 

lc_nei<='Y' 

RELEASE  Icjessags 
RETURN 

PROCEDURE  ACTCl 

I--  Eegin  USER8AR:  BAR  Menu  Actions, 
t—  (before  ites,  action,  and  after  iteic; 

I 

PRIVATE  lc_nBK,  Icjbf 
lc_net(='  ' 
lcjbf='  '■ 

DO  CASE 

CASE  'PADJ'  =  PADO 
lc_neH='Y' 

do'dive  kith  •  or 

CASE 'PADJ'  =  pad;) 
lc_nei(=’Y' 

DO'lDO  NITF  •  01" 

CASE  "PADJ"  =  FAli) 
lc_nei(='Y' 

dd'qual  nith  "  or 

CASE  'PADJ*  =  PADO 
k_new='Y' 

DC"eI!T  NITH  ‘  t'i" 

DTHERIilEE 
6  24, OC 

6  24,2!  SAY  "This  iter  has  no  actin',.  Press  a  ley." 
>!=!N1:EY!0) 

8  24,00 
ENDCASE 

SET  MESSAGE  TO 
IF  gc_quit='Q' 

IF  LEFTientryflg.l!  =  "P" 

DEACTIVATE  MENU 
ELSE 

DEACTIVATE  MENU  It  USERcAR 
ENDIF 
ENDIF 

IF  lc_net(='Y' 

IcJile^'SET'+gc  jrognu* 

DC  ilcjile. 

ENDIF 

RETURN 


7 


uuuumutmmmttuummmmmimtmtmmmtumtt 


I  Prograi . ;  DIVE.PRS 

I  Author . ;  This  is  an  APPLICATION  OBJECT. 

»  DatE . :  e-04-91 

I  Notice.. . ;  Type  intonation  here  or  greetings  to  your  users. 

t  dBASE  Ver....:  See  Application  lenu  to  use  as  sign-cn  banner. 


t  Senerated  by,:  APBEN  version  1.3 
I  Description..;  User  popup  for  entering  a  dive. 

t  Description..:  Kenu  actions 

mmnnnmtttmmtmmutumuuttmtmmtmttmtmu 

PROCEDURE  DIVE 
PARAMETER  entryflg 
PRIVATE  gcjrognui 
gcj)rognui='02’ 

DD  SE^02 
IF  gnjrror  >  0 
gn_error=0 
RETURN 
ENSIF 

I—  Before  lenu  code 


ACTIVATE  POPUP  DIVE 

I—  After  eer.j 

RETURN 
I-  EOP  DIVE 

PROCEDURE  SET02 

ON  KEY  LABEL  FI  DO  IHELFl 

DO  DBF02  41  open  tenu  level  database 

IF  gnjrror  =  0 

IF  gljolor  .AND,  .NOT.  SET('ATTRIBUTE')  =  •N+/B,RE+/BB,N/N  *+; 
CHR(381+CHR(38)+*  N+/N,N/B,RE+/SB,B/K,N/EE" 

SET  COLOR  OF  NORMAL  TO  N+/B 
SET  COLOR  OF  MESSAGES  TO  Nr/N 
SET  COLOR  OF  TITLES  TO  N/B 
SET  COLOR  OF  HISHLISHT  TO  RS+/8E 
SET  COLOR  OF  BOX  TO  RB+/6B 
SET  COLOR  OF  INFORMATION  TO  B/N 
SET  COLOR  OF  FIELDS  TO  N/BB 
ENDIF 
ENDIF 
RETURN 
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PROCEDURE  DEF02 
CLOSE  DATABASES 

I—  CpBR  lenu  level  vieh/detabaee 
Ic  tessage=’0" 

On’eRROS  lt_tBSEaQe=LTRI!‘'STR{ERRDF:;;}}+‘  *+i<££EAS 
USE  DIVE.DBF 
ON  ERROR 

Qr._error=VAL(lc_ie=sage) 

IF  gn_Br''or  >  0 

Do’Pause  RiTH  : 

'Error  opening  DIVE.DBF' 
ic  nei(='Y' 

RETURN 

ENDiF 

lc_neK='Y' 

RELEASE  lc_*esEags 
RETURN 

PROCEDURE  ACTO; 

»—  Begin  DIVE:  FOPU''  fien:  Actiors. 

I"  (before  ite*,  action,  and  after  ite^l 

t 

PRIVATE  k_Re»(,  Icjo'* 
lc_ne>i='  ' 
lObf:^'  ■ 

DO  CASE 
CASE  BA?,'!  *  1 
IF  .NOT.  gljatcb 
DO  BefAct 
ENDIF 

SET  SCOREEDAPD  O.N 
SET  KESSABE  TO 

I"  Desc:  attach  fo'Sct  file  LIVEFOF.N 
SET  FORWT  TO  CIvE'OF.!' 

APPEND 


I"  close  fo'iat  file  sc  as  not  tc  affect  PEAL 
SET  FQRflAT  TO 
SET  SCflREBOr.RI  OFF 
IF  .NOT.  gljatch 
DC  AftAct 
ENDIF 
ENDDASE 

SET  t1ESS.5,SE  TO 
IF  QC  qoit='Q' 

iF"LEFT(entryfIg.l)  =  “B' 

DEACTIVATE  HENU 
ELSE 

DEACTIVATE  PO'^Uf  ii  DIVE 
ENDIF 
ENDIF 

IF  ic  net(='Y' 


lc_file**S£THg:j!ro;nijf. 

DO  Ucjile. 

ENDIF 

RETURN 

tuttttittttttttitttttttutntiutMttiituttutttttttuuttttuttutt 

t  Prograi......:  LOS.PRE 

I  Author . :  This  is  an  APPLICATION  OBJECT. 

I  Date .  B-04-91 

I  Notice . !  Type  intoreation  here  or  greetings  to  your  users. 

t  dBASE  Ver....;  See  Application  lenu  to  use  as  sign-on  banner. 

I  Benerated  by.:  A^BEN  version  1.3 
)  Description..;  Log  popup  in  user  application  of  dive  log 

t  Description..:  Nenu  actions 

tuttttttmtututtnttititttttuttttttMttttitttntttttttttttttintt 

PROCEDURE  LOO 
PARAMETER  entry! Ig 
PRIVATE  gcjrogna* 
gcjrognu*='03“ 


DO  SET03 
IF  gn.error  >  0 
gn_error*0 
RETURN 
ENDIF 

I"  Before  lenu  code 


ACTIVATE  POPUP  LOE 

t”  After  eer.u 

RETURN 
t"  EOP  LOE 

PROCEDURE  SET03 

ON  KEY  LABEL  FI  DO  IhELPl 


DO  DBF03  hi  open  lenu  level  database 
IF  gn_error  =  0 

IF  gljolor  .AND.  .NOT.  SETCATIRIEUTE')  =  ■N»/E.R6+/BB,N/N 
CHR!38|+CHR|3e!+'  «+/N,N/B.R6+/68,E/li,N/EB* 

SET  COLOR  OF  NORMAL  TO  N+/B 
SET  COLOR  OF  NES3AEES  TO  Nt/N 
SET  COLOR  OF  TITLES  TO  N/B 
SET  COLOR  OF  HIEHLISHT  TO  RB+/EB 
SET  COLOR  OF  BOI  TO  RE*/6B 
SET  COLOR  OF  INFORMATION  TO  B/N 
SET  COLOR  OF  FIELDS  TO  N/EB 
ENDIF 
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EKDIF 

RETURN 

PROCEDURE  DBF03 
CLOSE  DATABASES 

t—  Open  lenu  level  vieK/dataUase 
lc_iessase=*0' 

On'eRROR  lc_«e55a5e=LTRl«lSTR(ERRCR!)))+'  ‘^NEESABE;) 
USE  DIVE.DBF 
ON  ERROR 

gn_error=VAL(lc_«essa5e) 

IF  gn  error  >  0 
DO’Pause  NITH  ; 

'Error  opening  DIVE.DB-'’ 
lc_nei(='y‘ 

RETURN 

ENDIF 

Icjen^'Y' 

RELEASE  Icjessage 
RETURN 

PROCEDURE  ACTOo 

t—  Begin  LOS:  POPUP  Neru  Actiors. 

I”  (before  itee,  action,  ar.c  after  iteel 

t 

ttttttttnntttitt 

PARAKETER  BATON 
IF  .NOT.  BATON:’ 60CD* 

BO  viola: 10 

ELSE 

tttnttttitttutttn 

PRIVATE  lc_nea,  ic.dtf 
lc_nei*:'  ' 

Icjbf:'  ' 

DC  CASE 

CASE  BARO  :  1 
IF  .NOT.  gl_batch 
DO  BefAct 
ENDIF 

SET  SCOREBOARD  ON 
SET  HESS ABE  TO 

tttuititttnttttitttttttiui 

DO  J0IN1.PR6  KITH  'BODD* 

tttuttttutttuuuitutttttt 

SET  SCOREBOARD  OFF 
IF  .NOT.  gl_batch 
DO  AftAct 
ENDIF 

CASE  BARO  :  2 

I"  Open  Ite*  level  v:e», 'database  and  indexes 
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CLOSE  DATABASES 


lc_db<='y 
ic  *55saqe='C‘ 

ON'eRROR  k_tss5a5S=LTRIf,'STR(ERF,CR{ )  1  )*' 
USE  TEMP. DBF 
DN  ERROR 

qn_error=VAL(lcjessaqe) 

IF  qnjrror  >  0 
DC  Pause  MITH  ; 

'Error  opening  TEMP.BBF' 
gn_error=0 

lc_file=’SET'4gcjrocnus 
DO  ilcjiie. 

RETURN 

ENDIF 


•*MESSASEI! 


!c_neM-'Y' 

RELEASE  Icjessace 
IF  .NOT.  gUatch 
DO  BefAct 
ENDIF 

SET  MESSAGE  TO 
I-  Desc!  Report 
REPORT  FORM  LQS.REPO  PLAIN 
NAIT 

IF  .NOT.  gl.batch 
DO  AftAct 
ENDIF 

CASE  BARO  =  3 

I"  Open  Itee  level  vieH/datatase  and  indexes 
CLOSE  DATABASES 


Ic_db1s'Y' 

lc_»ess3ge="0' 

On’eRROR  k_ies53gB=L''RI.MlSTR(EP.ROR'l);*‘  ‘•‘MESSASE!) 
USE  TEMP. DBF 


ON  ERRCR 

gR_erro'’=VAL(l:_iessa;5; 

IF  gnjrrcr  C 
D0”Pause  NITH  ; 

"Error  opening  TEMP. DBF’ 
gri^rrcsO 

lcJile=*SET’tgc  jrognue 
DO  llcjile. 

return” 

ENDIF 


k_new='Y‘ 

RELEASE  kjessage 
IF  .NOT.  gUatch 
DO  BefAct 
ENDIF 

SET  MESSAEE  TO 


I--  Desc:  Report 
SET  PRINT  ON 
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REPORT  FORM  LOSJEFC  PLAIN  NLE.’EC; 
SET  PRINT  OFF 
IF  .NOT.  gljatch 
DO  Alt Act 
ENDIF 
?NDCASE 

SET  MESSAGE  TO 
IF  gc_quit='Q' 

IF  LEFTtentryflg,!}  = 

DEACTIVATE  MENU 
ELSE 

DEACTIVATE  POPUP  (t(  LOG 
ENDIF 
ENDIF 

IF  Ic_neK*'Y' 

lcJile='SET’+9:_progrLiB 
DO  ikjile. 

ENDIF 

IF  lc_dbf='Y'  .AND.  .NOT.  k.nsn^'y 
lc_file='DBF*+gc_orog!ii;j 

Do'ikjik. 

ENDIF 

mtmmmtt 

ENDIF 

Ultitttttttttttt 


RETURN 

tmmmmmuttmummmtmumutmmmmmmmiu 


t  PrcgraB . 

t  Author . 

t  Date . 

I  Nctjce . 

I  DBASE  Ver.... 
t  Gene’ateri  by. 
I  Description.. 


GUAL.pRG 

This  15  an  AF.pLICATIO.N  OBJECT. 

3-04-91 

Type  inforsatior  her?  c  greetings  to  yccr  users 
See  Applicat.or  eer.i  to  use  as  sign-on  tanne''. 
APSEN  vereior.  1.3 

gcal  popup  for  user  application  for  Cive  log. 


t  Description, . :  Me.rj  actions 

ttuntnttuntutttttitunttntttttntttttttttttuittttiiinitittu 

PROCEDURE  QUAL 
PARAMETER  sntryflg 
PRIVATE  gcjirognu* 

9Cj)rognui='04" 

DO  SET04 
IF  gnjrror  >  0 
gn_Brror=0 
RETURN 
ENDIF 


t"  Before  lenu  code 
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ACTIVATE  POPUP  9UAL 


I--  Alter  tsnu 

RETURN 
I--  EOP  DUAL 

PROCEDURE  SET04 

ON  KEY  LABEL  FI  DC  IHELFi 

DO  DBF04  U  open  lenu  level  database 

IF  gn  error  =  0 

IF’gljolor  .AND.  .NOT.  SETi'ATTRlBUTEM  ^  •K+/B.fiS^/6B,N/N  *+ 
CHR(38|+CHR!3e!+‘  N+/N,N/B,R6*/fiB,B/N,N/SB’ 

SET  COLOR  OF  NORMAL  TO  N+/B 
SET  COLOR  OF  MESSAGES  TO  N+/N 
SET  COLOR  OF  TITLES  TO  N/B 
SET  COLOR  OF  HIGHLIGHT  TC  RG+/GB 
SET  COLOR  CF  BOK  TO  RB+/6E 
SET  COLOR  OF  INFORMATION  ^0  B/N 
SET  COLOR  OF  FIELDS  TO  N/EB 
END  IF 
ENDIF 
RETURN 

PROCEDLRE  DBF04 
CLOSE  DATABASES 

I"  Open  (tenu  level  vieh/datatase 
Ic  lessages'O" 

On'eRROR  k_*e353qe=LTRIM!STR(ERRCR;)))+'  HHESSASE;) 

USE  OlVER.DBF 
ON  ERROR 

gn_error=VAL(l:_ae3saqe; 

IF  gnjrror  >  C 
Dc'Pause  NITH  ; 

"Error  opening  DIVER. DBF* 
lcj;e«='Y' 

RETURN 

ENDIF 

lc_nei»='Y‘ 

RELEASE  Icjessage 
RETURN 

PROCEDURE  ACT04 

I--  Begin  DUAL:  POPUP  Menu  Actions. 

I--  (before  itei,  action,  and  after  ite*) 

I 

tuttittttttttt 

PARAMETER  BATON 
IF  .NOT.  BAT0N="60DD" 

DO  VIOLATIO 
ELSE 
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ttttttttttttt 


PRIVATE  lc_n8K,  Icjbf 
lc_neK=’  ' 

Icjbt^'  ■ 

DO  CASE 
CASE  BAR')  =  1 
IF  .NOT.  gljatch 
DO  EefAct 
ENDIF 

SET  SCOREBOARD  ON 
SET  HESSASE  TO 

tttttuttnititttttt 

DC  QUALLIST.PRB  WITH  "GOOD" 

tttttuttintiitttu 

SET  SCOREBOARD  OFF 
IF  .NOT.  Ql.batch 
DO  AftAct 
ENDIF 

CASE  BAR!)  =2 

I"  Open  Itee  level  vjew/database  and  indexes 
CLOSE  DATABASES 
lc_dbT*'Y' 
k  lessages'O" 

On'eRSOR  lc.iessa9esLTRIH(STR!£RR0R(l)l+"  '^HESSASE! ) 
USE  TENP5.DBF 
ON  ERROR 

gr,_error*VAL;  k.fessage) 

IF  gn_error  >  0 
Do’pause  KITH  ; 

‘Error  opening  TEHPI.DBf 
gn_error=0 

kJile="SET‘tgc_progr.o? 

Do’ilc.file, 

RETURN 

ENDIF 

k_nei«='Y' 

RELEASE  lc_iessage 
IF  .NOT.  gl_batch 
DO  BefAct 
ENDIF 

SET  HESSAGE  TO 
t—  Desc:  Report 
SET  PRINT  ON 

REPORT  FORH  OUALRPT  PLAIN  NOEJECT 
SET  PRINT  OFF 
IF  .NOT.  gljatch 
DO  AftAct 
ENDIF 
ENOCASE 
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SET  HESSABE  TO 
IF  gcjuit='Q' 

IF~LEFT(Entryflg.i)  =  ”8“ 

DEACTIVATE  KENl) 

ELSE 

DEACTIVATE  POPUP  H.  DUAL 
END  IF 
ENDIF 

IF  Ic_nei(='Y' 

lcJiIe=*SET‘+5cj!roQr,uF 

DO^ilcJile. 

ENDIF 

IF  lc_dbf='Y'  .AND.  .NDT.  lc_neH='V 
IcJile^'DBF'+gcjrognui 
DO'ikJile. 

ENDIF 

tttttttn 

ENDIF 

titttttii 

RETURN 

ttttiuitttittitttttntttttntttftuttntttttuntittitttntututttit 

t  Progra# . !  EHT.PRG 

$  Author . i  This  is  an  APPLICATION  DEJECT. 

t  Date . !  3-04-91 

f  Notice . :  Type  inforiaticn  he'e  or  greetings  to  your  users. 

t  dBASE  Ver....!  See  Application  eenu  to  use  as  sign-on  banner, 
t  Generated  by.!  APBEN  version  1.3 
t  Description..: 

t  Description..!  Menu  actions 

mmmmuuummmuummmmtmumtntmunmuu 

PROCEDURE  EIIT 
PARAMETER  entrytlg 
PRIVATE  gcjrognii 
gcjro9nu*=’05" 

DD  SET05 
IF  gnjrror  >  0 
gnjrrorsO 
RETURN 
ENDIF 


t”  Before  lenu  code 


ACTIVATE  POPUP  EIIT 

t"  After  lenu 

RETURN 
t-  EOP  EIIT 
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PROCEDURE  SETO? 

ON  KEY  LABEL  Fi  DO  IHELFl 

DO  DBF05  open  ibru  level  database 

IF  gn  error  =  0 

IF~9l_color  .AND.  .NOT.  SET ('ATTRIBUTE'}  =  'N*/B,RSt/6B,N/N  '+; 
CHR(3e)+CHR:38)+'  K+/N,«/B,RG*/G3,B/*,N/GE* 

SET  COLOR  OF  NORNAL  TO  W+/B 
SET  COLOR  OF  HESSA8ES  TO  «*/N 
SET  COLOR  OF  TITLES  TO  N'B 
SET  COLOR  OF  HIGHLIGHT  TO  RG+/G& 

SET  COLOR  OF  BCI  TO  RB+/EB 
SET  COLOR  OF  INFORMATION  TO  B/N 
SET  COLOR  OF  FIELDS  TO  N/GB 
ENDIF 
END  IF 
RETURN 

PROCEDURE  DPFCD 
CLOSE  DATABASES 

t--  Open  *enu  level  vien/database 
Ic  Mssage^'O" 

ON  ERROR  lc_»essage=L"RlH(STR(ERROR()))*'  '+H£SSA5E{! 

USE  DIVE.DBF 
ON  ERROR 

gn_error*VAL!lc_«e55age) 

IF  gnjrror  >  C 
D0"Pause  KITH  ! 

'Error  opening  DIVE.DBF' 
l:_ne»-'Y' 

RETURN 

ENDIF 

!c_new='Y’ 

RELEASE  Icjessage 
RETURN 


PROCEDURE  ACTOD 

I"  Begin  EIIT:  POPUP  Menu  Actions. 

I--  (before  itee,  action,  and  after  'tes) 

t 

PRIVATE  lc_new.  lc_dbf 
lc_nei»='  ' 
lcjbf="  ■ 

ttttuttuttnt 

RUN  pkzip  adldata  -•  -slRAO  t.dbf 

ittnututttt 

DO  CASE 

CASE  BAR!)  M 

t"  Return  to  caller 
gc_quit=’B' 

IF  LEFT(entrvflg.l)  0  'B' 
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DEACTIVATE  POPUP  &i  EXIT 
ELSE 

deact:  ate  henu 

ENDir 
RETURN 
ENCCASE 
SET  HESSABE  TO 
IF  gcjuit='Q' 

IF  LEFT(entrytIg,l!  =  ‘P’ 
DEACTIVATE  MENU 
ELSE 

DEACTIVATE  POPUP  H  EXIT 
ENDIF 
ENDIF 

IF  lc_ne«=‘Y' 

lcJile=‘SET*+9cjrogn'uff 
DO  Hcjile. 

ENDIF 

RETURN 


ttttnttttttuttttiittttiittttiftututittttttiittttuttttttttttttuunutti 

lit 

I--  Naie . !  DIVEFORN.fHT 

I--  Date . . 

I"  Version....:  dBASE  IV,  i^oriat  1.1 

I—  Notes . :  Foreat  files  use  "  as  (ieh.tite’’s‘ 

litttitiittttiittiiiiittttitinutitttiutttitttuttittiiutittittntmittti 

III 

I"  Foreat  file  initialnation  code - - - - . - . . 

I—  Soee  of  these  PR1VA’'E  variables  are  created  based  on  CodeBen  and  eav  not 
I—  be  used  by  your  particular  .f«t  file 

PRIVATE  IcJalL,  Icjurscr,  Icjisplay,  Icjtatus,  Icjarry,  Icjro:,; 
In_typeahd,  gc_cut 

IF  SET! 'TALK')  =  ’ON' 

SET  TALK  OFF 
IcJaU  =  ’ON' 

ELSE 

Icjalk  =  ’OFF’ 

ENCIF 

Icjursor  =  SETCCUP.SOR") 

SET  CURSOR  ON 

Icjtatus  =  SET  (‘STATUS’) 

I”  SET  STATUS  eas  ON  when  you  eent  into  the  Fores  Designer. 

IF  Icjtatus  =  ‘OFF' 

SET  STATUS  ON 
ENDIF 
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t—  6  SftY  BETS  Processing. 


t—  Foriet  Page:  1 

«  0,3  TO  fc,56  DOUBLE 

8  2,6  SftY  ’Dive  data  entry  tors' 

*  4,6  SftY  'fill  in  the  following  data  concerning  yoor  dive" 
e  8,7  TO  19,50 

«  9,8  SftY  ’diver  I.D.  nuaber  (SSb'!:’ 
i  9,38  BET  Diver_nufi  PICTURE  ’999-99-9999’ 

«  10,8  SftY  ’date  of  dive:’ 

«  10,38  BET  Date 

t  11,8  SAY  ’serial  (nth  dive  of  the  day):’ 

«  11,38  BET  Serial  PICTURE  ’9“ 

8  12,8  SftY  ’day  or  night:' 

8  12,38  BET  Nitejay  PICTURE  'UUV 
8  12,44  SftY  ’dive’ 

8  13,8  SftY  ’fresh  or  salt:’ 

8  13,38  BET  Freshjalt  PICTU.RE  'UUr 
8  13,44  SftY  ’water’ 

8  14,8  SftY  ’water  teserature:' 

8  14,38  BET  Teeperatar  PICTURE  *99’ 

8  14,41  SftY  ’degrees  F" 

8  15,8  SftY  ’saxiau*  depth  of  dive:’ 

8  15,36  BET  Depth  PICTURE  ’999’ 

8  15,42  SftY  ’feet' 

8  16,8  SftY  ’average  u/w  visibility:' 

8  16,36  BET  Visibility  »ICTURE  *999“ 

8  16,42  SftY  ‘feet’ 

6  17,8  SAY  ‘assart  of  air  consated:’ 

8  17,38  BET  ftir_ased  PICTURE  ’9999' 

8  17.43  SftY  “psi’ 

8  18,6  SftY  ’total  dive  tise:' 

8  1,8,33  BET  use  ("ICTURE  ’y."' 

8  18,42  SftY  “hoars’ 

REftD 

t"  Foreat  Page:  2 

8  0,2  SAY  ‘Does  the  site  yoa  dived  at  have  a  systes  site  nasber?  (checi:  on  carrent  site' 
8  1,4  SftY  ’printcat)  If  it  dees,  enter  it  here:’ 

8  1,<(2  BET  Site.naa  PICTURE  ’999* 

8  1.47  SftY  ‘If  not,  describe  tne  site  in  the’ 

8  1  >  SftY  ‘next  data  field,  dive  resarls.' 

8  4,2  SftY  ‘dive  resarks:* 

8  5,9  BET  Divejtls  PICTURE  ’8568 

nmnumuhunnnunmnnmmnnnunm 

mnmnnmmuummmmuunnmunnm 

inmnnnnuuinmmnmnmummmmt' 

8  6,9  BET  Divejiks  PICTURE  ‘8866 

ummmmhmnmmmumunuumnmm 

mnnummnnnnnummuuumnunnun 
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xmnmmumxmmnmmumnnummm' 

«  7,9  BET  DivejilTE  PICTURE  ’SEsB 
nnmnmmnmuuuunnnmnmmmm'iii 
mxnmmmmmnnmmummmmunmyj 
nnimmnmmmmnnmmmnmmmm’ 

t—  Fortat  -file  exit  code . . 


I--  SET  STATUS  was  GN  when  you  Kent  into  the  Fo'«s  Cesicier. 
IF  IcjtatuB  =  *CFF“  Entered  fee  with  status  off 
SET  STATUS  DFF  ii  Turn  STATUS  ‘OFF'  or,  the  wav  out 
ENDIF 

SET  CURSOR  ilcjarsor. 

SET  TALK  4Ic_t3lk. 

RELEASE  Ic_t2U,lc_fields,k_statuE 
t--  EQP:  DFvEFOR!'..FflT 


t  dHASE  IV  .PRC'  file 

I  JOINI.PRB  (joins  dive.dbf  with  dive-.dbf  and  site.dbf  and  sto'’BS  to  tecp.dbf 
I  for  one  diver,  fields  are  set  for  a  dive  log,) 

lUttlttttUt 

Raraheter  baton 

ON  ERROR  CANCEL 
IF  .NOT.  BATON  *  “S03D“ 

DO  VIOLATIO 
ELSE 

tttittttttttttt 


ACCEPT  'Enter  the  diver  nueter  of  the  diver  whos  Icq  you  wish  t:  feo: 
to  nusber 


SET  FIELDS  TO 
SELECT  1 

USE  DIVE.DBF  AGAIN  NOUt'DATE 
USE  DIVER. DBF  AGAIN  NCUPOATE  IN  2  ORDER  DIVER.NUN 
USE  SITE.DBF  AGAIN  NDUPDAIE  IN  3  ORDER  SITE  NUN 
SET  EXACT  ON 

SE^  FILTER  TO  ((A->DIVER  NUN=nasber)!  .AND.  F0UND(2)  .AND.  FOUND'.; 

31 

SET  RELATION  TO  A->D!VER_NUR  INTO  B 
SELECT  2 

SET  RELATION  TC  A->S!TE  NUN  INTO  C 
SELECT  1 
SET  SKIP  TO  B,C 
60  TOP 

SET  FIELDS  TO  A->DATE,A->SER1AL,A->SITE  N'JN,A->D1VER  NyH,A- 
>FRESH_SALT; 

,A->NlfEJAY,A-)TEMFERATUR.A->DEPTH,A->VISIEILITY,A->AIR  USED.A->TINE; 
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jlirieric=0  &4  sst  iines  tc  zsrs 

I"  NOEJECT  paraKter 
IF  gl_no8je:t 

IF”jeject=‘BEF!)F.E’ 

jiej8ct='N0NE^ 

ENDIF 

IF  jieject='BOTH'' 
jeject=*AFTER' 

ENDIF 

ENDIF 


I"  Set-up  environesrt 
ON  ESCAPE  DO  Prnabsrt 
IF  SETCTALr)=’DN' 

SET  TALK  OFF 


9C_talk=‘0N“ 

ELSE 

QC  talk='OFF* 
ENDIF 


gc_5pace=SET( 'SPACE') 
SET  SPACE  OFF 


9C_tUB=TlHE()  ki  syste*  ti*e  for  prsdsfinsd  field 

gd_date=DAT£()  4i  systei  date  •  •  '  • 

glJindl=.F.  44  first  and  last  page  flag 

gl jrntflgs.T.  44  Continue  printing  flag 

gl_HidoN:.T.  44  flag  for  checking  MidoK  bands 

gn_lengthsLEN(gc_heading)  44  store  length  a<  the  HEADING 
gn_level*2  44  current  bard  being  processed 

gnjage^jageno  44  grab  curi-ent  page  nueser 

gnjspace=_p5pacing  44  get  current  print  spacing 


I—  Set  up  procedure  fo-  page  break 
gn_atlin8=jl8ngth  -  (jspacir.g  +  1) 

ON  PAGE  AT  LINE  gnjtline  EJECT  PAGE 

1“  Print  Report 

PRINTJCB 

4”  Initialiae  suiiary  variables. 
r_isutl=0 

IF  glj)lain 

ON  PAGE  AT  LINE  gn  atline  DC  Pgolain 
ELSE 

ON  PAGE  AT  LINE  gn  atline  DO  Pgfcot 
ENDIF 

DO  Pghead 

g!_fandl=.T.  44  first  physical  page  started 
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,A->DIVE  S«KS,B->FNfi'lE,E->!i:,P->LNA!'E 

SET  FIELDS  ON 

SET  SAFETY  OFF 

ERASE  TEHP.DBF 

CC!>Y  TO  TEW. DBF 

SET  SAFETY  ON 

litttttittnt 

ENDIF 

ttttUUittttU 

return 


r.NjvpP^r-vijIikjr 


t  Progras . :  B:\LCE_REPO.fRL' 

t  Date .  2-C4-?r 

t  Versions . :  dPASE  !V,  Repo-'t  1.1 

I 

t  Notes; 

t - 


t  Prior  to  running  this  procedure  «ith  the  DO  coreand 
I  it  is  necessary  use  LOCATE  because  the  CONTINUE 
t  stateier.t  is  in  the  lain  loop. 

t 

t”  Paraseters 

PARAMETERS  gl_nDejett,  gljlain,  gljuiiary,  gc_headng,  gcjxtra 
It  The  first  three  paraieters  are  of  type  Logical. 

It  The  fourth  paraieter  is  a  string.  The  fifth  is  extra. 

PRIVATE  _pe:ect,  _Hrap 

I”  Test  for  no  records  found 
IF  EOF'l  .OR.  .NOT.  FCJNCi) 

RETURN 

EN3IF 

t"  turn  word  wrap  lode  off 
_tirap=.F. 


IF  jlength  <  (jspacino  I  6  +  1)  +  (jspacing  +  1)  +  2 
SET  DEVICE  TO  SCREEN'’ 

DEFINE  WINDCN  gwjepcrt  FROM  7,17  TO  11,62  DOUBLE 
ACTIVATE  NINDSH  gwjepert 

B  0.1  SAY  ’Increase  the  page  length  for  this  report." 

8  2,1  SAY  ’Press  any  key  ..." 

x=!N!:EY(0) 

DEACTIVATE  NINDOK  gwjepcrt 
RELEASE  NINDON  gwjeport 
RETURN 
ENDIF 


B7 


DC  Rintro 


I--  File  Loop 

DDRHILE  F0UND()  .AND.  .NOT.  EOF!)  .AND.  gl.prr.tflg 
5n_!eve!=0 
t--  Detail  lines 
IF  gljuesary 
DO  l!pd_Vars 
ELSE 

DO  _Detail 
ENDIF 

gl  NidoM=.T.  hi  enable  xidcM  cherlinq 

CONfINUE 
ENDDD 

IF  gljrntflg 
DO  Rsuss 

IF  jiineno  <=  gn_ath".e 
EJECT  PA5E 
ENDIP 
ELSE 

DO  Rsuee 
DC  Reset 
RETURN 
ENOIF 

GN  PAGE 

ENDPRINTJCE 

DO  Reset 
RETURN 

t  EOF:  B:\LCa_REPD. FRO 

I—  Update  suasary  tieics  anc'or  calculated  Fields. 

PROCEDURE  Ups_Vars 
t”  Sue 

r_isuslsr_«5uel+TI!1£ 

RETURN 

t  EOF:  Upd_Vars 

t”  Set  flag  to  get  out  of  DO  NHILE  Ipop  xhen  escape  is  pressed. 

PROCEDURE  Prnabcrt 

gljirntflg=.F. 

RETURN 

t  EOP:  Prnabort 
PROCEDURE  Pghead 

9 

??  lIFIg! jlain,"  ,  “Page  No.*  )  AT  0,; 

IIFlg!  jlain," ,  jageno)  PICTURE  ’RRR"  AT  9,; 

•Dive  log  for*  AT  22,  | 
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FnatB  FUNCTION  'T-  ft!  3C,; 
Ni  FUNCTION  fiT  4B,; 
Lnaie  FUNCTION  'T'  fIT  51 


t—  Print  HEfiDING  paraeeter  le.  REPORT  FOF.N  <n3re'  HEACING  <espC' 
IF  .NOT.  gljiain  .ANS.  grjer.gth  '  0 

??  gc.headirg  FUNCTION  MsV+LTRIH.’STR'.ria'gir-Jtarginl) 

7 

ENDIF 

IF  .NOT.  gljlair 
”  gdjate  AT  0 

7 

ENDIF 

7 

”  ’Date'  AT  0,; 

•Site  naie  or  location'  AT  9.; 

•Air*  AT  4C.; 

■Nater’  AT  49,; 

•Max'  AT  60,; 

•Visibility'  AT  66.: 

•Tile"  AT  77 

??  'Serial'  AT  0,; 

•used’  A’  40,; 

•teip'  AT  49,; 

•deptb'  AT  60 

RETURN 

I  EOF:  Pghead 


PROCEDURE  Rintrc 

7 

RETURN 

t  EOF:  Rintrc 
PROCEDURE  _D8ta;l 

IF  3  t  gnjispace  <  gnjtlir.e  -  ;_ps:a:irg  16^1) 

IF  gljiacK  .AND.  jjlinenctC  I  gnjspace  gn  atlins  +  1 
EJECT  PAGE 
ENDIF 
ENDIF 

DO  Updjars 
??  Date  AT  C,; 

Naie  FUNCTION  '1030'  AT  9.; 

Air_used  PICTURE  '99999999''  AT  40.; 

Teaperatur  PICTURE  '9999999999'  AT  49,; 

Depth  PICTURE  '99999'  AT  60,; 

Visibility  PICTURE  '9999999999'  AT  66,; 

Tite  PICTURE  '999.9'  AT  77 

7 

V  Freshjalt  FUNCTION  'T'  PICTURE  'imUllW  AT  9,; 
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9 


"Hater,*  AT  20,; 

Nitejay  FUNCTION  "T"  PICTURE  'inxnn*  6T  27.; 
•Dive"  AT  36 

? 

??  Serial  PICTURE  ■9999':9"  AT  0,; 

Oive.rits  FUNCTION  "TVTO"  AT  9 

7 

RETURN 

I  EOP:  _Detail 

PROCEDURE  Rsuii 
?’  "Total  tiie:"  AT  62,; 
r.isuil  PICTURE  ■9?9.9"  A^  77 
glJanril'.F.  66  last  page  finisted 

7  ” 

RETURN 
t  EOP:  Rsuii 

PROCEDURE  Pa  foot 
PRIVATE  _box,  jsoaang 

gljidois.F.  6t  disable  litiOH  checiirg 

jspacingsl 

7 

IF  .NOT.  gljlain 
ENDIF 

EJECT  PACE 

I—  is  the  page  nusbe'  greater  tha"  the  ending  page 
IF  jageno  _oepage 
60T0  BOTTCf 
SNIP 

gnJevelsO 

endif' 

IF  .NOT.  gljlain  .ANO.  gljand! 
j)spacing=gn_psoa:e 
DO  Pghead 
EN5IF 
RETURN 

I  EOP:  Pgfoct 

I--  Process  page  break  when  FLAIN  option  ;s  used. 

PROCEDURE  Pgplain 

PRIVA'E  _box 

EJECT  PAGE 

RETURN 

t  EOP:  Pgplain 

t"  Reset  dBASE  environient  prior  to  calling  report 
PROCEDURE  Reset 
SET  SPACE  igcjpace. 

SET  TAtr.  tgcjalk. 

ON  ESCAPE 
UN  PAGE 
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RETURN 
I  HOP;  Reset 


t  dBASE  IV  .QBE  file 

t  OUAILIST.PRB  (joins  diver. dbf  with  qual.dbf  and  stores  to  teept.dbf 
t  for  one  diver,  fields  are  set  for  a  ciaiification  listing. ! 

tnmmm 
PARARETER  BATON 
ON  ERROR  CANCEL 
IF  .NOT.  BATON=’SQQD' 

DO  VIOLATIO 
ELSE 

tmmmm 

ACCEPT  'Enter  tbe  diver  nueber  cf  the  diver  whcs  cual  list  you  wish  to  find: 
to  nuiber 

SET  FIELDS  TO 
SELECT  1 

USE  DIVER.DEF  AGAIN  N3UPDATE 

USE  QUAL.DBF  AGAIN  NQJPOATE  IN  2  ORDER  DIVER  NUN 

SET  EIACT  ON 

SET  FILTER  TO  (|A->DIVER.NL'«*nuiber))  .AND.  FOUNDS) 

SET  RELATION  T'J  A->DIVER  NUN  INTO  B 
SET  SKIP  TO  P. 

60  TOP 

SET  FIELDS  TO  A->FNAHE,A-;R1.A->LNANE,B->QUAL  NAf!E,B->CO'fPANY,B- 
>0ATE,B; 

->INSTRUCTOR,A->D!VER  NiiN 

SET  FIELDS  ON 

SET  SAFETY  OFF 

ERASE  TENP5.DBF 

COPY  TO  TEHP5.DBF 

SET  SAFETY  ON 

ttttttttuttt 

ENDIF 

ttttntttttt 

return 


I  . .  B:\QUALRPT.FRE 

I  Date . .  B-04-91 

I  Versions . .  dBASE  IV,  Report  1.1 

} 

t  Notes: 

I - 
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9 


I  Prior  to  running  this  procedure  uith  the  DQ  coosand 
t  it  is  necessary  use  LOCATE  because  the  dWTIhUE 

I  stateient  is  ir  the  eain  loop. 

t 

I”  Paraieters 

PARAMETERS  gljoeject,  gljlain,  gljuMary,  gc_heading,  gc_extra 

II  The  first  three  paraeeters  are  of  type  Logical. 

II  The  fourth  paraieter  is  a  string.  The  fifth  is  extra. 

PRIVATE  jeject,  _t(rap 

I--  Test  for  no  records  found 
IF  EDF()  .OR.  .NOT.  FOUNCO 
RETURN 
ENDIF 

I"  turn  word  wrap  icde  off 
jiraps.F. 


IF  jlength  <  (jspacing  I  i  +  1)  +  !  jspacinq  +  1)  +  2 
SET  DEVICE  TG  SCREEN 

DEFINE  NINDON  gnjeport  FROM  7,17  TO  11, i2  DO'JEcE 
ACTIVATE  HINOOM  g«_reoort 

8  0,1  SAY  'Increase  the  page  length  for  this  report.’ 

12,1  SAY  'Press  any  key  ...“ 

xsINKEYlO) 

DEACTIVATE  NINOQi  gw.report 
RELEASE  NINDOW  gw_report 
RETURN 
ENDI' 

jilinenosO  ii  set  lines  to  zero 

I"  NOEJECT  paraiete' 

IF  gl_noeje:t 

IF'jeject='BEFORE* 

j!P;ect=“NONE’ 

ENDIF 

IF  je3ecf=^"I-‘rTH’ 
je:ect="AFTER' 

ENDIF 

ENDIF 

I—  Set-up  environient 
ON  ESCAPE  DQ  Prnabcrt 
IF  SET('TALt:'!=“DN' 

SET  TALL  OFF 
gcJalk^'ON' 

ELSE 

gc  talk^'OFF' 

ENDIF 

9C_space=SET( 'SPACE') 

SET  SPACE  OFF 

gcJiie^TIHEll  (I  systei  tiie  for  predefined  field 
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gd_date=OATEi)  M  svstes  date  »  »  “  • 

glJandl=.F.  ih  first  and  last  page  flag 

gl jrntflQ=.T.  (&  Continue  printing  flag 

gljiidON=.T.  Ill  flag  for  checking  miPok  bands 

gnJength=LEN(gc_heading)  store  length  of  the  HEADINS 
gnjevel=2  At:  current  band  being  processed 

gnjiage'jageno  It  grab  current  page  nuiber 

gnj)space=jspacing  At  get  current  print  spacing 


t"  Set  up  procedure  for  page  break 
gnjtlinesjlength  -  (jspacing  +  1) 

ON  PA3E  AT  LINE  gn.atline  EJECT  PAGE 

I--  Print  Report 

PRINTJOB 

IF  glj)lain 

ON  PASE  AT  LINE  gn  atline  DO  Pgplair 
ELSE 

ON  PASE  AT  LINE  gn  at!  me  DO  Pgfoot 
ENDIF 

DO  Pghead 


glJandls.T.  At  first  physical  page  started 


I”  Fi't  Loop 

DO  NHILE  FOUND!)  .AND.  .NOT.  EOFl)  .AND.  gl jjrntflg 
'gnJevelsO 
I—  Detail  lines 
IF  gljuesary 
DO  'Jpd  Vars 
ELSE 

DO  _Detail 
ENDIF 

gl  MidOKs.T.  AA  enable  NidOK  checking 

CONTINUE 
ENDDO 

IF  gl jrntflg 
DO  Rsuii 

IF  .plineno  <*  gn  atlme 
EJECT  PASE 
ENDIF 
ELSE 

DO  Rsuii 
DO  Reset 
RETURN 
ENDIF 


ON  PACE 
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ENDPR1NT30B 


DO  Reset 
RETURN 

I  EOP;  B:\QUALRPT.FR6 

t—  Update  suitary  fields  and/or  calculated  fields. 

PROCEDURE  Upd  Vars 
RETURN 

I  EOP:  Upd.Vars 

t—  Set  flaa  to  get  out  of  DO  NHILE  loop  uneri  escape  is  pressed. 

PROCEDURE  Prnabort 

gljrntflg=.F. 

RETURN 

t  EOP:  Prnabort 
PROCEDURE  Pghead 

7 

?■>  IIFlgljlain,”  ,  ’Page  No.^  )  fiT  C,j 
IIFIgljram/'.jagenoi  PICTJRE  '999*  AT  9,; 

•Qual  list  for:’  AT  21 

7 

I-  Print  HEADINE  parareter  le.  REPORT  FORf!  <na*e>  HEADINE  'expC 
IF  .NOT.  gljlain  .AND,  gnjength  >  0 

?’  gc.heading  FUNCTION  ’l;V’+LTR!H(STfi(_r*afg:r-.lBar;ir:)) 

7 

ENDIF 

’?  IIF(glj)lain,' '  ,gd_date)  AT  0,; 

Fnaae  FUNCTION  "T*  AT  Ifi,; 

«i  FUNCTION  ■!“  AT  31, j 
Lnaie  FUNCTION  ’T’  AT  34 

7 

7 

7 

”  ’QUAl.NANE’  AT  5.; 

■COMPANY’  AT  17.; 

’CATE’  AT  29.; 

’INSTRUCTOR’  AT  39 

7 

RETURN 

t  EOF:  Pghead 


PROCEDURE  _Detail 

IF  gnjspace  <  grjtline  -  (jspacing  I  6  +  II 

IF  gl_»idoi(  .AND.  _Bhner:+gnjspace  )  grjtline  +  1 
EJECT  PAGE 
ENDIF 
ENDIF 

DO  Updjars 
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??  QujljaiE  FUNCTION  "T"  AT  5.; 

Coipany  FUNCTION  ’T”  AT  17.; 

Date  AT  29,; 

Instructor  FUNCTION  ’T’  AT  39 

? 

RETUnN 

t  EOF;  .Detail 
PROCEDURE  Rsum 

glJandls.F.  41  last  page  finished 
? 

RETURN 
t  EOF;  Rsuh 

PROCEDURE  Pgfoot 
PRIVATE  _box,  jspacing 

gljidOM^.F.  44  disable  HidoM  checking 

jspacing*! 

? 

IF  .NOT.  gljlain 

ENDIF 

EJECT  PASE 

I-*  is  the  page  nuiber  greater  than  the  ending  page 
IF  jageno  >  jepage 
60T0  BOTTOM 
SKIP 

gn  1 eve 1*0 

endif" 

IF  .NOT.  gljlain  .AND.  gl.fardl 
jspacing*gnjsp3ce 
DO  Pghead 
ENDIF 
RETURN 

I  EOP:  Pgfoot 

I"  Process  page  break  when  PLAIN  option  is  used. 

PROCEDURE  Pgplain 

PRIVATE  _box 

EJECT  PABE 

RETURN 

i  EOP:  Pgplain 

I--  met  dBASE  environeent  prior  to  calling  report 
PROCbOURE  Reset 
SET  Ef'ACE  4gc_space. 

SET  TALK  Igcjalk. 

ON  ESCAPE 
ON  PASE 
RETURN 

t  EOP:  Reset 


96 


LIST  OF  REFERENCES 


Murray,  W.,  "Security  Considerations  for  Personal 
Computers,"  IBM  Systems  Journal,  pg.27,  v.23,  no. 3,  1984. 

Stephenson,  P.,  "Personal  and  Private,"  Byte,  pg.286,  June 
1989. 

Brown,  B.,  "The  Small  Data  Center,"  Byte,  pg.286,  June  1989. 

Pfleeger,  C.,  Security  in  Computing,  Prentice-Hall,  Inc., 
1989. 

Giladi,  R.  and  Zviran,  M.,  Centralizing  the  Data, 
Distributing  the  Processing,  Working  Paper  No.  89-02,  Naval 
Postgraduate  School,  January  1989. 

National  Computer  Security  Center,  Personal  Computer 
Security  Considerations,  NCSC  Pub  WA-002-85,  1985. 

National  Telecommunications  and  Information  Systems  Security 
Commitee,  Office  Automation  Security  Guide,  NTISS  COMPUSEC  / 
1-87,  1987. 

Post,  G.  and  Kievit,  K.,  "Accessibility  vs.  Security:  A  Look 
at  the  Demand  for  Computer  Security, "  Computers  and 
Security,  Vol.  10,  No.  4,  June  1991, Elsevier  Science 
Publishers  B.  V. 

Gogan,  J.,  "Should  PCs  Be  Personally  Allocated?",  Journal  of 
Management  Information  Systems,  Spring  1991,  Vol.  7,  No.  4, 
1991. 

Tanenbaum,  A.,  Operating  Systems:  Design  and  Implementation, 
pp.4-5,  Prentice-Hall,  Inc.,  1987. 

Tanenbaum,  A.,  Structured  Computer  Organization,  Prentice- 
Hall,  Inc.,  1990. 

Zarger,  C.,  "Is  Your  PC  Secure?"  Mechanical  Engineering,  pg. 
57,  March  1988. 

Mensching,  J.  and  Adams,  D.,  Managing  an  Information  System, 
Prentice  Hall,  Inc.,  1991. 


BIBLIOGRAPHY 


Awad,  E.,  Management  Information  Systems,  Benjamin  Cummings, 
Jnc.,  1988. 

Bakst,  S.,  "Beware  of  Potholes  on  the  Path  to  PC  Security," 
The  tffice,  June  1990. 

Boebert,  W.,  Kain,  R.  and  Young,  W.,  "Secure  Computing:  The 
Secure  Ada  Target  Approach, "  Scientific  Honeyweller,  July 
1985. 

Brown,  B.,  "The  Small  Data  Center,"  Byte,  pg.286,  June  1989. 

Chorley,  B.  and  Price,  W.,  "An  Intelligent  Token  For  Secure 
Transactions,"  Security  and  Protection  in  Information 
Systems,  Elsevier  Science  Publishers  B.  V.,  1989. 

U.  S.  Dept,  of  Defense,  Trusted  Computing  Sys.  Evaluation 
Criteria,  DOD  5200.28STD,  Dec  85. 

Giladi,  R.  and  Zviran,  M.,  Centralizing  the  Data, 
Distributing  the  Processing,  Working  Paper  No.  89-02,  Naval 
Postgraduate  School,  January  1989. 

Gogan,  J.,  "Should  PCs  Be  Personally  Allocated?",  Journal  of 
Management  Information  Systems,  Spring  1991,  Vol.  7,  No.  4, 
1991. 

Mehrmann,  L.  and  Amery,  C.,  "Security  Practices  for 
Information  Systems  Networks,"  Security  and  Protection  in 
Information  Systems,  Elsevier  Science  Publishers  B.  V., 

1989. 

Mensching,  J.  and  Adams,  D.,  Managing  an  Information  System, 
Prentice  Hall,  Inc.,  1991. 

Murray,  W.,  "Security  Considerations  for  Personal 
Computers,"  IBM  Systems  Journal,  v.23,  no. 3,  1984. 

Murray,  W.,  "Security  in  Advanced  Applications  and 
Environments,  "  Security  and  Protection  in  InformaticiA 
Systems,  Elsevier  Science  Publishers  B.  V.,  1989. 

National  Computer  Security  Center,  Personal  Computer 
Security  Considerations,  NCSC  Pub  WA-002-85,  1985. 


98 


Pfleeger,  C.,  Security  in  Computing,  Prentice-Hall,  Inc., 
1989. 

Post,  G.  and  Kievit,  K.  -'Accessibility  vs.  Security:  A  Look 
V  at  the  Demand  for  Computer  Security, "  Computers  and 

Security,  Vol.  10,  No.  4,  June  1991,  Elsevier  Science 
Publishers  B.  V. 

Schultz,  J.,  "Low  Cost  Security  for  Personal  Computers," 
Signal,  November  1969. 

Stephenson,  P.,  "Personal  and  Private,"  Byte,  June  1989. 

Summers,  R. ,  "An  Overview  of  Computer  Security,"  IBM  Systems 
Journal,  v.23,  no. 4,  1984. 

Tanenbaum,  A.,  Operating  Systems : Design  and  Implementation, 
Prentice-Hall,  Inc.,  1987. 

Tanenbaum,  A.,  Structured  Computer  Organization,  Prentice- 
Hall,  Inc.,  1990. 

Walker,  S.,  "Network  Security  Overview",  paper  presented  at 
the  1985  Symposium  on  Security  and  Privacy,  1985. 

Zarger,  C.,  "Is  Your  PC  Secure?"  Mechanical  Engineering,  pg. 
57,  March  1988. 


i 


4 


99 


INITIAL  DISTRIBUTION  LIST 


1 .  Defense  Technical  Information  Center  2 

Cameron  Station 

Alexandria,  Virginia  22304-6145 

2.  Library,  Code  52  2 

Naval  Postgraduate  School 

Monterey,  California  93943-5002 

3.  Prof.  Moshe  Zviran,  Code  AS/ZV  1 

Naval  Postgraduate  School 

Monterey,  California  93943-5000 

4.  Prof.  Will’.aun  J.  Haga,  Code  AS/HG  1 

Naval  Postgraduate  School 

Monterey,  California  93943-5000 


100 


INITIAL  DISTRIBUTION  LIST 


1 .  Defense  Technical  Information  Center  2 

Cameron  Station 

Alexandria,  Virginia  22304-6145 

2.  Library,  Code  52  2 

Naval  Postgraduate  School 

Monterey,  California  93943-5002 

3.  Prof.  Moshe  Zviran,  Code  AS/ZV  1 

Naval  Postgraduate  School 

Monterey,  California  93943-5000 

4.  Prof.  Wi.Tliam  J.  Haga,  Code  AS/HG  1 

Naval  Postgraduate  School 

Monterey,  California  93943-5000 


100 


